Report - lhrpa3200215.blogspot.rs/

Report Overview

Submitted URL
lhrpa3200215.blogspot.rs/
IP
142.250.74.1
ASN
#15169 GOOGLE
Submitted
2024-05-08 23:26:40
Access
public
Website Title
Société Générale | Connexion
Final URL
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Tags
societe_generale financial phishing
urlquery detections
Phishing - Societe Generale

Detections

urlquery
159
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lhrpa3200215.blogspot.rs	unknown	unknown	No data	No data	479 B	697 B	142.250.74.1
lhrpa3200215.blogspot.com	unknown	unknown	No data	No data	480 B	16 kB	216.58.207.193
dal4.hostclusters.com	unknown	2021-10-28	2024-02-21	2024-03-24	80 kB	2.2 MB	45.79.23.61
102.165.14.4:5000	unknown	unknown	No data	No data	491 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	lhrpa3200215.blogspot.com/	Societe Generale
2024-05-07	medium	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	Societe Generale

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	102.165.14.4	Sinkholed

ThreatFox

No alerts detected

JavaScript (19)

	URL	Size	First Seen	Last Seen
	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	15 B	2024-01-26	2024-05-17
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-26 23:55:17 Last Seen2024-05-17 18:40:59 Times Seen53 Hash 6543c63a556c9694a4c5cf435793b82e db4b76d50cf756046d9a1d1c17f04cbbee02b188 94b852f1e6ac2900589ffd4102cae69ed5d2757338cb6ab7096f2b6109f93b26 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	243 B	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen409 Hash 71d19f7fe5d2135f268f61647dc03988 1e25ed11489509b55de05241a48d728969493458 5e5eaf8632a7264aaa23953240629b96a0709d13b1091fc9763970c2dd8a02ce Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/rules.js.download	488 B	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/rules.js.download IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen820 Hash cd884ffdf1f759fbdeaae54b636288d4 450ea313a0b4b250024abd0935c1f59617841134 f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d Loading...

	unknown	348 B	2023-04-13	2024-05-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-19 21:08:43 Times Seen400 Hash 7f439c6c2a49cdb2f74f78ba119ce489 8beb3121045e0506df9a71c51b0c6a4d76701c68 e140fb816df49620a4efeb7c9ee66c30b4f76fd0cf6e248c3cc3997ef6fbe693 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery2.js.download	70 kB	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery2.js.download IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen857 Hash f86b7a0e560edb5951576cf8884153e6 e5b4c5b95c79e6e42ef676ed77986db3f85223ab 74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1 Loading...

	unknown	1.7 kB	2024-01-26	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-01-26 23:55:17 Last Seen2024-05-20 01:40:35 Times Seen88 Hash b852c4eaaca1894d1c9149741b28e09a ab035051433149743af3db977f22b69f5e7ae2a4 5e2bb9f4cf78ed3015b9859759d0afc9e74afd58a2a103513808f42a76852f72 Loading...

	unknown	601 B	2023-04-13	2024-05-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-19 21:08:43 Times Seen400 Hash 56cd57cab9aa2700068ff79bb038a7a5 f8a30016cb976300910d908d278a66118c7df2fc 73724ae008cf4909631ffebcb26867d9486a7ad898060790619926f9499fc92a Loading...

	unknown	171 B	2023-04-13	2024-05-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 09:04:01 Last Seen2024-05-19 21:08:43 Times Seen400 Hash 17d527f0bf9fc871c030bdd3baa73f72 e53ccb8d239a7286525b686f3da6d65b462e6ea2 93998249270c96f5c32ba2c8c0baffc43032b571e0684ec9c55d8d7d01f64bc9 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/js/jq.js	294 kB	2023-03-12	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/js/jq.js IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 23:28:44 Last Seen2024-05-19 09:17:20 Times Seen498 Hash 1150e561f02aaa2a237a4f200face65d 6afaec62e997d0a42356c71521ef0d157b506757 9d02ee01919145c20b03ee9d3013af7118793dedf5d2c0696a773af90066c953 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	483 B	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen407 Hash d4e17ac95f6499091f5567792887b0fe 605112c6edb9f3f3aa27108cb32230deedbac7d2 e02463ed16a3d8b83b06cbc206098817ba44827c535b8a3971b78ccdb327abff Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	303 B	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen404 Hash df4d122557c68345696b953efe9e8f1d 664b2317e9984afa6eadd6ad13bf90b92b1e8d31 e082f41c3e3feb3e3d50eb92d57a6f04b702744fbc401dca0fdd749808e70f8c Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/js.js.download	1.3 MB	2023-03-07	2024-05-19
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/js.js.download IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen598 Hash 6e6c70c409456c23a09d9adbce8d2e80 0f50b6f4f4555c31e8f832b446cda4996acb4460 3957ed7a4d5b5f5c36fe0872fbc2f619b8d2d0094b134dd65d1ebd6f3352847b Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery3.js	369 kB	2024-01-26	2024-05-20
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery3.js IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-26 23:55:17 Last Seen2024-05-20 01:40:35 Times Seen128 Hash 3191b77970058cdc48b0a4c2123394d1 4e87101a9738a7e5a349c47a966d89658207bc3d 15c179af6a66be10fa288925824cbf9fea1e277066233e55425c119dd01db43e Loading...

	unknown	916 B	2024-01-26	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-01-26 23:55:17 Last Seen2024-05-20 01:40:35 Times Seen88 Hash 68c581ccb00d585fdb0af2e0bc5799be c6bfdf994f3c16e7527c726bc372a04bc3872bdd d2ccf7e379a3f9d443c40e21beb1ee503f57ac7633d2efbfd3f1577cdb752de9 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery.js.download	88 kB	2023-03-07	2024-05-20
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery.js.download IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-20 04:23:38 Times Seen99139 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php	671 B	2024-01-26	2024-05-09
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-26 23:55:17 Last Seen2024-05-09 19:26:17 Times Seen16 Hash 28ca291e8f40a6554af7412afad6e403 e1b931b8c6d4ad47380515bb1d724843d6915bb7 7ba4797af5387ebd4c507f483e788030c8ce0a77f70c64cf83be8e245db559d9 Loading...

	dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/res/jq.js	90 kB	2023-03-07	2024-05-20
Pretty URL dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/res/jq.js IP 45.79.23.61 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:21 Last Seen2024-05-20 02:07:28 Times Seen6144 Hash 3e4bb227fb55271bfe9c9d4a09147bd8 156837f75f6600ccb602b4efcbd393636c33f35e ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-20
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-20 04:22:45 Times Seen353151 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#2 Eval - 81506f6c9b74db893b121a759da430d7	1.0 kB	2023-03-07	2024-05-19
Pretty Observations First Seen2023-03-07 01:33:09 Last Seen2024-05-19 21:08:43 Times Seen464 Hash 81506f6c9b74db893b121a759da430d7 2d4226d3b0de0217029bc6113d7489f398b5a4be a49959becff3155c2f2c2ba4684dfecdf77e055678880cbddac3c81eba11fe3c Loading...

HTTP Transactions (119)

URL IP Response Size

lhrpa3200215.blogspot.rs/

142.250.74.1

202 B

URL
lhrpa3200215.blogspot.rs/
IP
142.250.74.1:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
202 B (202 bytes)
Hash
ae8e05612354eea98c78606c63050645
a5ae619b4b39ad56606e1b47531825702c4e727a
8930a855f1ab2679385afe10a357ed3da6274dfa6ac71e70b106915a59625f54

HTTP Headers

GET / HTTP/1.1
Host: lhrpa3200215.blogspot.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://lhrpa3200215.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 08 May 2024 23:26:12 GMT
expires: Wed, 08 May 2024 23:26:12 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 202
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lhrpa3200215.blogspot.com/

216.58.207.193

15 kB

URL
lhrpa3200215.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7139)
Size
15 kB (15216 bytes)
Hash
23ef1d9b8cc05f1f1872aadab03f56b6
6d7017d36d14ae52708b3b2bdef53de607f9279f
d8b52004276debb8feaf6b505ed1ccfa635b123c0382dac7e92f508124de8597

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Societe Generale

HTTP Headers

GET / HTTP/1.1
Host: lhrpa3200215.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 08 May 2024 23:26:13 GMT
date: Wed, 08 May 2024 23:26:13 GMT
cache-control: private, max-age=0
last-modified: Tue, 07 May 2024 17:10:17 GMT
etag: W/"74f3d78b0b7e0f7b925c54adfdbc560e314ce74455d228fac155e49aafa8fd9a"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15216
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_20190723161948.min.css

45.79.23.61

200 OK

34 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_20190723161948.min.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (310), with CRLF line terminators
Size
34 kB (34240 bytes)
Hash
3ceb0fb380c636a6e7849491323d71b0
0bc15dd5af9e83955b3d12f8d08e36f7ebf434de
f513229e1ccc5679b510e10814c2dcb9431574dfcdf2ad7d0e24a67c8344c9cd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_20190723161948.min.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34240
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_pri_20201013141424.min.css

45.79.23.61

200 OK

34 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_pri_20201013141424.min.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
34 kB (33561 bytes)
Hash
23ca09657029cb02397aa2af5b812bb8
2dbf5d4fd91d979b3d26e65e064f155b17cb4ff5
ffb0158cdc267512932acd22b13aa4f0df1652290faa987148d69f923b6cb797

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_pri_20201013141424.min.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 33561
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/spec56_btn_gsm_all_gcd_20190320190559.min.css

45.79.23.61

200 OK

274 B

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/spec56_btn_gsm_all_gcd_20190320190559.min.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with CRLF line terminators
Size
274 B (274 bytes)
Hash
eabaf0aaf10e39b24e4bc7c25d2e7ec8
d0e48a9cdb4d870b510d88cdfc325a2614071327
31525381d30528a71a4c4419b0ee495b4053428b061e75ac0e9556b00d56d1e4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/spec56_btn_gsm_all_gcd_20190320190559.min.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 274
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/awt-front-BDDF.css

45.79.23.61

200 OK

12 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/awt-front-BDDF.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
12 kB (11881 bytes)
Hash
d8d07b2eee0de2299f9472f923cd736c
c305b5152ac4720e22a161529e9fc7c519fda6b0
064cdaef709bff99e6ad7775891f4e2a0979ede5cbc1e8e60a7ccea5d1885879

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/awt-front-BDDF.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11881
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/inbenta.css

45.79.23.61

200 OK

16 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/inbenta.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (65307)
Size
16 kB (15980 bytes)
Hash
24b79f19be4d1c57be83a9bb799615cc
12c70f9acbee3bfc0daf608798d3185dfeac8761
7a0960947283e10fd527c3b96b64ab4781f68c3c7f820cd0f1e9a42b96bae233

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/inbenta.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 15980
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css

45.79.23.61

200 OK

27 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (1330), with CRLF line terminators
Size
27 kB (27019 bytes)
Hash
77603dc1f154ebf1ce331920d4a899fa
07e054367cdbee879d51feea346de422cd1bb4d9
2d44928b93b88ed19c681cc9c4a16f00428a70831d3d1933a1c5db9afb33eab5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 27019
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/rules.js.download

45.79.23.61

200 OK

488 B

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/rules.js.download
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with CRLF line terminators
Size
488 B (488 bytes)
Hash
cd884ffdf1f759fbdeaae54b636288d4
450ea313a0b4b250024abd0935c1f59617841134
f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/rules.js.download HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 488
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery2.js.download

45.79.23.61

200 OK

70 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery2.js.download
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, ASCII text, with very long lines (33165)
Size
70 kB (70472 bytes)
Hash
f86b7a0e560edb5951576cf8884153e6
e5b4c5b95c79e6e42ef676ed77986db3f85223ab
74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery2.js.download HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 70472
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery.js.download

45.79.23.61

200 OK

88 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery.js.download
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery.js.download HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 88145
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery3.js

45.79.23.61

200 OK

121 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery3.js
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65434), with no line terminators
Size
121 kB (121347 bytes)
Hash
3191b77970058cdc48b0a4c2123394d1
4e87101a9738a7e5a349c47a966d89658207bc3d
15c179af6a66be10fa288925824cbf9fea1e277066233e55425c119dd01db43e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/jquery3.js HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: application/javascript
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 121347
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/js/jq.js

45.79.23.61

200 OK

84 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/js/jq.js
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, ASCII text
Size
84 kB (83850 bytes)
Hash
1150e561f02aaa2a237a4f200face65d
6afaec62e997d0a42356c71521ef0d157b506757
9d02ee01919145c20b03ee9d3013af7118793dedf5d2c0696a773af90066c953

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/js/jq.js HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: application/javascript
last-modified: Mon, 02 Jan 2023 22:14:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 83850
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/res/jq.js

45.79.23.61

200 OK

30 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/res/jq.js
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators
Size
30 kB (30260 bytes)
Hash
3e4bb227fb55271bfe9c9d4a09147bd8
156837f75f6600ccb602b4efcbd393636c33f35e
ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/res/jq.js HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: application/javascript
last-modified: Sun, 26 Dec 2021 03:01:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30260
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/gen_ui.png

45.79.23.61

200 OK

6.4 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/gen_ui.png
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Size
6.4 kB (6380 bytes)
Hash
f5f55947733314117f1109f93f826b5f
394e87fcb82200b9c108182bdc761dc6aa016467
c4763204659e2a150da0e4f784da55eff7c77ae08b0c4fe9156a832093fb90fb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/gen_ui.png HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: image/png
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 6380
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/print_20190320190559.min.css

45.79.23.61

200 OK

776 B

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/print_20190320190559.min.css
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
ASCII text, with very long lines (3067), with no line terminators
Size
776 B (776 bytes)
Hash
e4d358e525d052a0377f57af7a5f5a82
f1dc2890a644a2bd2daba774933381739698c036
cbf2f9788fa5b22dd4c4428843fdd3ea68595db536cf347517da7d048d3bedcf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/print_20190320190559.min.css HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:15 GMT
content-type: text/css
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 776
date: Wed, 08 May 2024 23:26:15 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/logo-sg-seul.svg

45.79.23.61

200 OK

1.4 kB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/logo-sg-seul.svg
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1364 bytes)
Hash
a4905efc552b898322c256cb4d4f55c3
6ca6d615b2ebe329819a0338879c1d206ad0b90b
4d5f7f9cf24e66420cd0f39be3d181b4566ff8dcc8e699731c88787e511befd3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/logo-sg-seul.svg HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:14 GMT
content-type: image/svg+xml
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1364
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/js.js.download

45.79.23.61

200 OK

1.3 MB

URL GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/js.js.download
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (805), with CRLF line terminators
Size
1.3 MB (1264576 bytes)
Hash
6e6c70c409456c23a09d9adbce8d2e80
0f50b6f4f4555c31e8f832b446cda4996acb4460
3957ed7a4d5b5f5c36fe0872fbc2f619b8d2d0094b134dd65d1ebd6f3352847b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/js.js.download HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 1264576
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/pictos-fonctionnels_20200629183129.svg

45.79.23.61

200 OK

88 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/pictos-fonctionnels_20200629183129.svg
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
SVG Scalable Vector Graphics image
Size
88 kB (88288 bytes)
Hash
da558b838d28b3ad56202aa0a4e848eb
0e91544bf95c232d558db1e57119d5fc5c0aeb74
3deb480b7998aca8fb7d8a3e6b07e356daf97d9d1120c4204733b15e091eba14

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/pictos-fonctionnels_20200629183129.svg HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: image/svg+xml
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 88288
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/new_sprite.png

45.79.23.61

200 OK

10 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/new_sprite.png
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
PNG image data, 312 x 104, 8-bit/color RGBA, non-interlaced
Size
10 kB (9961 bytes)
Hash
675d3d69bb78ed155d9d443bef4cccd8
8266846da238de6218a75a11744f35f821baff74
0d477834d11f75ff989d2b6bfbcbaaed80a8e4f8efe65569f4cee2ad603a73af

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/new_sprite.png HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: image/png
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 9961
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/spriteV4.png

45.79.23.61

200 OK

56 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/spriteV4.png
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
PNG image data, 880 x 650, 8-bit/color RGBA, non-interlaced
Size
56 kB (56012 bytes)
Hash
2489b1de4b742de1d025c2751296143e
ca790ae20b4603ce6595ab1a0384dd217105306c
fdffcd1a92a88cf374901faf2ec466c6d16c0baa8b1f92426a24424743b65ab4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/spriteV4.png HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: image/png
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 56012
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.eot

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.eot
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.eot HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.woff

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.woff
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.woff HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/awt-front-BDDF.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.eot

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.eot
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.eot HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.eot

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.eot
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.eot HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/41de603c123a04387e8b57c2f2c9897e.svg

45.79.23.61

200 OK

19 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/41de603c123a04387e8b57c2f2c9897e.svg
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
SVG Scalable Vector Graphics image
Size
19 kB (18553 bytes)
Hash
41de603c123a04387e8b57c2f2c9897e
05bde7f0b25c5a1fdf59729b4c158365ed13e43f
71b9d7b337580a9913ccf8db7dbd855d042b4ac01f9498b5c43c9ebefc2a2eb2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/41de603c123a04387e8b57c2f2c9897e.svg HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: image/svg+xml
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18553
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.woff

45.79.23.61

200 OK

30 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.woff
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
Web Open Font Format, TrueType, length 29936, version 1.0
Size
30 kB (29936 bytes)
Hash
ee8fb2f1d98caedf1822bd94ac49592a
78342ab4847d4794808b9f1ef361c8845139cd5b
b2bd7e62939ac983fd01971920b44c1313a0d00b6f81ef80ae7a4b8ba5f20311

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-regular.woff HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: font/woff
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 29936
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.otf

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.otf
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/fonts/sourcesanspro-it.otf HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/awt-front-BDDF.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.woff

45.79.23.61

200 OK

64 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.woff
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
Web Open Font Format, TrueType, length 63896, version 1.50
Size
64 kB (63896 bytes)
Hash
66d6f332d0d93578c726f68d3a9ada3b
10ebe50154b114f97ff25d99034ce724116ee47e
ecc485cb5434c03a5990728a87f66f6b46635d3bd97fd9fd175df05e37bbb6f9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-semibold.woff HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: font/woff
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 63896
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.woff

45.79.23.61

200 OK

30 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.woff
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
Web Open Font Format, TrueType, length 29688, version 1.0
Size
30 kB (29688 bytes)
Hash
8ddef052d66452862e8aef5f63fe6109
7432d98ccfc52ff401e3c37439ee2e61722c279b
10d5ee3a453be2ea83297c419182d5c32de6f46a530594fa5ec2aea8cd31c626

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-bold.woff HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/style.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: font/woff
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 29688
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.otf

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.otf
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.otf HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_pri_20201013141424.min.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.woff

45.79.23.61

404 Not Found

1.3 kB

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.woff
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/fonts/sourcesanspro-italic.woff HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/index_files/index_pri_20201013141424.min.css
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/favicon.ico

45.79.23.61

200 OK

318 B

URL GET HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/favicon.ico
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 16 colors
Size
318 B (318 bytes)
Hash
ca10c09aeaf43460d3760f50c608eb51
f2ed2a4fe0e1eadb7dd28444ea6b7a04abf0d38e
daf58b06a09d467436ee5fd10eefbeadac3cf6ecaef1eca1884ef8330f561642

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/img/favicon.ico HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 23:26:16 GMT
content-type: image/x-icon
last-modified: Fri, 29 Dec 2023 00:26:32 GMT
accept-ranges: bytes
content-length: 318
date: Wed, 08 May 2024 23:26:16 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:17 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:17 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:17 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:17 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:18 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:18 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:18 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:18 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:19 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:19 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:19 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:19 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:20 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:20 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:20 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php

45.79.23.61

200 OK

8.6 kB

URL User Request GET HTTP/2
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (2652), with CRLF, LF line terminators
Size
8.6 kB (8556 bytes)
Hash
37b09cbd1b6c2ba52578d264083b7524
c523591cf499d4e214a5ed307d9c6e5502abfc09
a3ed6e6acbb0e5dd53338a156d078acbd96dd95b6f868a040ee8b991be0fdbc4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale
OpenPhish	phishing	Societe Generale

HTTP Headers

GET /~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lhrpa3200215.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:14 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:21 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:21 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:21 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:21 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:22 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:22 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:22 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:22 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:23 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:23 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:23 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:23 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:24 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:24 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:24 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:24 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:25 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:25 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:25 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:25 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:26 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:26 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:26 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:26 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:27 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:27 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:27 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:27 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:28 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:28 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:28 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:28 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:29 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:29 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:29 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:29 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:30 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:30 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:30 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:30 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:31 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:31 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:31 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:31 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:32 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:32 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:32 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:32 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:33 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:33 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:33 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:33 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:34 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:34 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:34 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:34 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:35 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:35 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:35 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:35 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:36 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:36 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:36 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:36 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

0 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 23
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Wed, 08 May 2024 23:26:37 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php

45.79.23.61

200 OK

5 B

URL POST HTTP/3
dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php
IP
45.79.23.61:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Certificate
IssuerLet's Encrypt
Subjectdal4.hostclusters.com
FingerprintB8:9C:5B:F9:E7:D3:03:1F:6A:4A:4D:E2:8B:D9:38:D6:10:37:B7:6D
ValidityFri, 26 Apr 2024 02:08:01 GMT - Thu, 25 Jul 2024 02:08:00 GMT

File type
very short file (no magic)
Size
5 B (5 bytes)
Hash
cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

POST /~pwaprmaze/AKEMZLA/ZAMELZ/SG/panel/classes/processor.php HTTP/1.1
Host: dal4.hostclusters.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 21
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Referer: https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php
Cookie: PHPSESSID=1cf8b64327376c62ad348623968bdc1a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 23:26:37 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests

102.165.14.4:5000/receive_token?referrer=loco

0.0.0.0

0 B

URL POST
102.165.14.4:5000/receive_token?referrer=loco
IP
0.0.0.0:0
ASN
#0

Requested by
https://dal4.hostclusters.com/~pwaprmaze/AKEMZLA/ZAMELZ/SG/web/login.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /receive_token?referrer=loco HTTP/1.1
Host: 102.165.14.4:5000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://dal4.hostclusters.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (19)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN