| practice.net.au/115/Celeste/netbank.html |  203.132.95.167 | 200 OK | 9.0 kB |
URL User Request GET HTTP/1.1practice.net.au/115/Celeste/netbank.html IP203.132.95.167:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3405), with CRLF line terminators Hash927c44ace5bedbf8430b544a934b0308 cbf18394e843db63739423ea10c8e82f7838c196 f3889a39e8199409ef939a0d1b3d653412ff3113c6a1b06ecb99b758fd0fd691
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank | | OpenPhish | phishing | Commonwealth Bank of Australia |
GET /115/Celeste/netbank.html HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:56 GMT
Content-Type: text/html
Content-Length: 9049
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:47:37 GMT
ETag: "613f-613f7fb811536-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css | 203.132.95.167 | 200 OK | 8.1 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeASCII text, with very long lines (31873), with no line terminators Hash8397238ab0ae7a25ea1af4d375f2c3df 299454f71219bb8827c6f131d396f167e6e69e6d 700303a27f1a898cfba0febbb9ef126ce76fad6ba65108d3b56c35ea973b73fb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:56 GMT
Content-Type: text/css
Content-Length: 8148
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "7c81-613f7f17e3c63-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/59c1c6a4 | 203.132.95.167 | 200 OK | 27 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/59c1c6a4 IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (14360) Hashd713bb41462c799d8f63c57a50cce5cd 3c4f1b8d51683f025557a34909e3d478ade7f6b8 bd0d2d52f6f216cb19d489ed62c6e7e6051d959ce3752dbd61b0eac87de9cd23
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/59c1c6a4 HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:56 GMT
Content-Length: 26690
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "6842-613f7f17b8517"
Accept-Ranges: bytes
|
|
| practice.net.au/115/Celeste/netbank_files/trackingbootstrap.c8068b07c37c03776d99cb952fec6272.js.download | 203.132.95.167 | 200 OK | 4.2 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/trackingbootstrap.c8068b07c37c03776d99cb952fec6272.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeASCII text, with very long lines (11366), with no line terminators Hashc8068b07c37c03776d99cb952fec6272 40abb09c948c6deb5789acf6de5d1df21cce3fb6 81bf6b11b38dd4edee209e4783acd0180f5a4660b9123635d6afebe9470e9fd3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/trackingbootstrap.c8068b07c37c03776d99cb952fec6272.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 4198
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "2c66-613f7f1803449-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download | 203.132.95.167 | 200 OK | 7.9 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (11721) Hash4043785f5795e2e8297bdfe0cdf60f4d 2f6c06391199d8c4f89f468e398f94fef932798e 7cf46fbfca24dd814d3ef457da79b54ca3a38858a75f6f70ff49343231cc0bf9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 7923
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "4de1-613f7f17d2325-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download | 203.132.95.167 | 200 OK | 36 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (65508) Hash2a6786eb7f1cb2358bda2b68ecf3a920 13d031a4e91fd4b517b6a031c37a3c1e2d5f0785 5baa2bf4cd16d28c80692b9a20713d7ec4c305652ce520bbcbfc924e57919e15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 36364
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1708f-613f7f17e05b4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download | 203.132.95.167 | 200 OK | 47 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (62938) Hash8784d605543edaf86ccd7ce9c54ba0eb 1d48fa88879007911570ad8dcbcfa890d3df0f4e 47db8c5a79387f5a1a5c43b4ccd04c9b0633e33ffcdd6bc0d9e68c4686d49413
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 46669
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1d3f1-613f7f1801509-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/metrics.9fad0b7ae109eb7ff6f728371db87a10.js.download | 203.132.95.167 | 200 OK | 2.6 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/metrics.9fad0b7ae109eb7ff6f728371db87a10.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (7896), with no line terminators Hash9fad0b7ae109eb7ff6f728371db87a10 d0804357a40a5275e65f935a65a454885208afa4 c2dca1942a00fd9a1a9b3d993579bab824861ff28177cdb2e9c89d59e8cf5bc6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/metrics.9fad0b7ae109eb7ff6f728371db87a10.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 2554
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1ed8-613f7f17e53d3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/smartbanner.d1197ec1675a985d0591d2083729fe1a.js.download | 203.132.95.167 | 200 OK | 2.5 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/smartbanner.d1197ec1675a985d0591d2083729fe1a.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7522), with no line terminators Hashd1197ec1675a985d0591d2083729fe1a cc588442ff5d3953f968e454b13c6acd905537f7 08df99ec4d261b66ad39c6b65776c83fc7d66591d0fbb466fe0950737db57bfc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/smartbanner.d1197ec1675a985d0591d2083729fe1a.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 2545
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1d64-613f7f17f78ca-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download | 203.132.95.167 | 200 OK | 25 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash9b8de72fe2f973dd95ef094847ce3974 4922107025013373e24b89d8d8b67a859db47715 dcf81f81e9abca1b1942c63e37c79547ef37c0b8fd127655c6c23b59fabdf0b1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Content-Length: 25053
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1103c-613f7f17c86e6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/2a817845.js.download | 203.132.95.167 | 200 OK | 136 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/2a817845.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (64647) Size136 kB (135889 bytes) Hashe3fd3146881a4ef75b521146b6ebea74 d5eb35cbf19f7cc59010792d6d7508ce316449ff d33e375915cb5eae9c0eb5d165daaf2de294633cf59b6e767d24ea64ada4eede
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/2a817845.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "97302-613f7f17c34de-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/images/hbg.0236e4e9a193069c4e8554db8b06354c.png | 203.132.95.167 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/images/hbg.0236e4e9a193069c4e8554db8b06354c.png IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text, with very long lines (2140) Hash9a90f63504b7d267dae304c08dff21e4 8e26d8a9442640522f47672e782b8820b476f65e df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/images/hbg.0236e4e9a193069c4e8554db8b06354c.png HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
ETag: W/"c8c-5dc807840f1c0;6140f15e1230e
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif | 203.132.95.167 | 200 OK | 4.9 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeGIF image data, version 89a, 256 x 46 Hashac9de6fb5214be84653367c74ba0b5f0 be61645ad75ab434ce7195268eb453f77314f9ec 4620bea7b8db9ffe1747e9c29910d7ea2ec84a7a3c7416e7a8a70e450073d820
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: image/gif
Content-Length: 4852
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "12f4-613f7f17b9c87"
Accept-Ranges: bytes
|
|
| practice.net.au/115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download | 203.132.95.167 | 200 OK | 139 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (39928) Size139 kB (138791 bytes) Hash36971982ebc03a2658d8e51f70007637 389e5799a0321f5fa83d3ac1f14bf86799be4cb2 c1366941e76e519a2aa15c50241f44f81528f5c5765f200c420d70e1fd26b893
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "61b34-613f7f17cd505-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/nb_messaging.jpg | 203.132.95.167 | 200 OK | 20 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/nb_messaging.jpg IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 201x96, components 3 Hashd779b1b61319ff06a75e39bdb0fd19c8 4236b4e96960b4448b7bc8c9c06a2f674848b1d5 84ecea0bc8922edb4eaca036bf1f172a64d7034d04b274f45dfa1d59047a9295
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/nb_messaging.jpg HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: image/jpeg
Content-Length: 19693
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "4ced-613f7f17ed4bb"
Accept-Ranges: bytes
|
|
| practice.net.au/115/Celeste/netbank_files/signout.html | 203.132.95.167 | 200 OK | 231 B |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/signout.html IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text Hash75657b9074afd8a2452a0d2e12d0402d bcf2d8e1137e02b3fb89b620e3b0ab2223643329 ce237f166630bff12aadbddfef6ba22befa33876b94632e150e73964e47ade92
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/signout.html HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=1; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: text/html
Content-Length: 231
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "113-613f7f17f26c2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/sign-out.html | 203.132.95.167 | 200 OK | 192 B |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/sign-out.html IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text Hash08bd33320bcaf5906de0e17f791a55c4 49614dad07ab3e15b7bdaf1cc544b7ba00a09dee 6503112546a3a65149b85d9adc9b4ce125abb68ba859566f4236aa4cf8c6e6eb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/sign-out.html HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=1; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: text/html
Content-Length: 192
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "df-613f7f17f0b6a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/images/logonsprite2.307a0c523f35f709f390895b4720d350.png | 203.132.95.167 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/images/logonsprite2.307a0c523f35f709f390895b4720d350.png IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text, with very long lines (2140) Hash9a90f63504b7d267dae304c08dff21e4 8e26d8a9442640522f47672e782b8820b476f65e df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/images/logonsprite2.307a0c523f35f709f390895b4720d350.png HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css
Cookie: cdContextId=1; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
ETag: W/"c8c-5dc807840f1c0;6140f15e1230e
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/lAcTwKESw | 203.132.95.167 | 200 OK | 215 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/lAcTwKESw IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size215 kB (215408 bytes) Hash05c36c17e53be8270db4a58d06b38e79 8af146314c8dd932c0b8a1ab0268f9823312dcda 381975bb9cbab3f0f46bc820850732a9238f22c2d821a91cf2d497e89e8e16f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/lAcTwKESw HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:27:58 GMT
Content-Length: 215408
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "34970-613f7f17d80e4"
Accept-Ranges: bytes
|
|
| wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco | 20.53.176.113 | 200 OK | 2.2 kB |
URL POST HTTP/2wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco IP20.53.176.113:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerDigiCert Inc Subjectwup-d8814f41.commbank.com.au FingerprintF4:5C:B1:A8:F5:CF:DF:0D:82:E3:FE:DF:8F:3C:72:9C:5B:9A:F5:42 ValidityThu, 11 May 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hash14d3a3d46a6a35a996a2a0c35a22839f c97cd82993302b0c41f2f9b470eb91b71f7a6879 ac150ad29e19e671c8510b8d612bcb9f115010a850dbbecd9798fea7bc213e5a
POST /client/v3.1/web/wup?cid=coco HTTP/1.1
Host: wup-d8814f41.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: http://practice.net.au
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 2153
date: Sat, 27 Apr 2024 04:27:58 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 8374926a-9575-422a-9eec-721b9ae7638f
X-Firefox-Spdy: h2
|
|
| practice.net.au/static/cmxAssets/tracking/TrackingBase.json?callback=jsonCallback | 203.132.95.167 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1practice.net.au/static/cmxAssets/tracking/TrackingBase.json?callback=jsonCallback IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text, with very long lines (2140) Hash9a90f63504b7d267dae304c08dff21e4 8e26d8a9442640522f47672e782b8820b476f65e df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /static/cmxAssets/tracking/TrackingBase.json?callback=jsonCallback HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=1; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 27 Apr 2024 04:27:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
ETag: W/"c8c-5dc807840f1c0;616f794f8cc26
Content-Encoding: gzip
|
|
| practice.net.au/favicon.ico | 203.132.95.167 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1practice.net.au/favicon.ico IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text, with very long lines (2140) Hash9a90f63504b7d267dae304c08dff21e4 8e26d8a9442640522f47672e782b8820b476f65e df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /favicon.ico HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 27 Apr 2024 04:27:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
ETag: W/"c8c-5dc807840f1c0;616f794f8cc26
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download | 203.132.95.167 | 200 OK | 7.9 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (11721) Hash4043785f5795e2e8297bdfe0cdf60f4d 2f6c06391199d8c4f89f468e398f94fef932798e 7cf46fbfca24dd814d3ef457da79b54ca3a38858a75f6f70ff49343231cc0bf9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/instrumentation-merge.4043785f5795e2e8297bdfe0cdf60f4d.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: application/javascript
Content-Length: 7923
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "4de1-613f7f17d2325-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.my.commbank.com.au/financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= |  23.38.200.80 | 302 Moved Temporarily | 0 B |
URL GET HTTP/1.1www.my.commbank.com.au/financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= IP23.38.200.80:443
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerEntrust, Inc. Subjectmy.commbank.com.au Fingerprint72:14:DE:FE:3E:13:F8:F0:7B:67:2D:54:9E:9D:A2:7D:56:42:EF:AF ValidityMon, 03 Jul 2023 00:11:47 GMT - Sat, 27 Jul 2024 00:11:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= HTTP/1.1
Host: www.my.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Location: https://www1.my.commbank.com.au/financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer=
Server: BigIP
Content-Length: 0
X-EdgeConnect-MidMile-RTT: 18
X-EdgeConnect-Origin-MEX-Latency: 289
Date: Sat, 27 Apr 2024 04:28:00 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
|
|
| practice.net.au/115/Celeste/netbank.html?Embedded=true | 203.132.95.167 | 200 OK | 9.0 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank.html?Embedded=true IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3405), with CRLF line terminators Hash927c44ace5bedbf8430b544a934b0308 cbf18394e843db63739423ea10c8e82f7838c196 f3889a39e8199409ef939a0d1b3d653412ff3113c6a1b06ecb99b758fd0fd691
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank.html?Embedded=true HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: text/html
Content-Length: 9049
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:47:37 GMT
ETag: "613f-613f7fb811536-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco | 20.53.176.113 | 200 OK | 730 B |
URL POST HTTP/2wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco IP20.53.176.113:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerDigiCert Inc Subjectwup-d8814f41.commbank.com.au FingerprintF4:5C:B1:A8:F5:CF:DF:0D:82:E3:FE:DF:8F:3C:72:9C:5B:9A:F5:42 ValidityThu, 11 May 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hashb941ee61451e0525e0a3a536c7c9fa35 dc12fb2abe7be877c61af56cf4ddd3ab399028ae 694be5feab6854bb446316bb625063c4c45f54f8fa1817ad791b6ec6f6d7ce43
POST /client/v3.1/web/wup?cid=coco HTTP/1.1
Host: wup-d8814f41.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1026
Origin: http://practice.net.au
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 730
date: Sat, 27 Apr 2024 04:27:59 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: a650bfe9-9998-43b2-a2ea-8db47790a0a2
X-Firefox-Spdy: h2
|
|
| practice.net.au/akam/13/pixel_59c1c6a4 | 203.132.95.167 | 404 Not Found | 1.6 kB |
URL POST HTTP/1.1practice.net.au/akam/13/pixel_59c1c6a4 IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text, with very long lines (2140) Hash9a90f63504b7d267dae304c08dff21e4 8e26d8a9442640522f47672e782b8820b476f65e df08ecea3c17448cf735e62672f7a8dc5e66cc411e620dbd2e609e730d485b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
POST /akam/13/pixel_59c1c6a4 HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 2933
Origin: http://practice.net.au
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Wed, 13 Apr 2022 03:06:55 GMT
ETag: W/"c8c-5dc807840f1c0;616f794f8cc26
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download | 203.132.95.167 | 200 OK | 47 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (62938) Hash8784d605543edaf86ccd7ce9c54ba0eb 1d48fa88879007911570ad8dcbcfa890d3df0f4e 47db8c5a79387f5a1a5c43b4ccd04c9b0633e33ffcdd6bc0d9e68c4686d49413
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/tracking-merge.8784d605543edaf86ccd7ce9c54ba0eb.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: application/javascript
Content-Length: 46669
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1d3f1-613f7f1801509-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download | 203.132.95.167 | 200 OK | 36 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (65508) Hash2a6786eb7f1cb2358bda2b68ecf3a920 13d031a4e91fd4b517b6a031c37a3c1e2d5f0785 5baa2bf4cd16d28c80692b9a20713d7ec4c305652ce520bbcbfc924e57919e15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/marketing-merge.2a6786eb7f1cb2358bda2b68ecf3a920.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: application/javascript
Content-Length: 36364
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1708f-613f7f17e05b4-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download | 203.132.95.167 | 200 OK | 25 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash9b8de72fe2f973dd95ef094847ce3974 4922107025013373e24b89d8d8b67a859db47715 dcf81f81e9abca1b1942c63e37c79547ef37c0b8fd127655c6c23b59fabdf0b1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/func.9b8de72fe2f973dd95ef094847ce3974.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: application/javascript
Content-Length: 25053
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "1103c-613f7f17c86e6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download | 203.132.95.167 | 200 OK | 139 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJavaScript source, ASCII text, with very long lines (39928) Size139 kB (138791 bytes) Hash36971982ebc03a2658d8e51f70007637 389e5799a0321f5fa83d3ac1f14bf86799be4cb2 c1366941e76e519a2aa15c50241f44f81528f5c5765f200c420d70e1fd26b893
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/core-merge.36971982ebc03a2658d8e51f70007637.js.download HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "61b34-613f7f17cd505-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www1.my.commbank.com.au/financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= | 23.38.200.80 | 404 Not Found | 832 B |
URL GET HTTP/1.1www1.my.commbank.com.au/financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= IP23.38.200.80:443
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerEntrust, Inc. Subjectmy.commbank.com.au Fingerprint72:14:DE:FE:3E:13:F8:F0:7B:67:2D:54:9E:9D:A2:7D:56:42:EF:AF ValidityMon, 03 Jul 2023 00:11:47 GMT - Sat, 27 Jul 2024 00:11:46 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5343c1a8b203c162a3bf3870d9f50fd4 04b5b886c20d88b57eea6d8ff882624a4ac1e51d dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /financial.js?url=http%3A%2F%2Fpractice.net.au%2F115%2FCeleste%2Fnetbank.html&referrer= HTTP/1.1
Host: www1.my.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://practice.net.au/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 832
X-EdgeConnect-MidMile-RTT: 18
X-EdgeConnect-Origin-MEX-Latency: 289
Date: Sat, 27 Apr 2024 04:28:01 GMT
Connection: keep-alive
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: BIGipServermy.commbank.com.au_Burwood=539106988.35437.0000; path=/; Secure
ak_bmsc=4447662B38AC044F8FF01AE1C592E761~000000000000000000000000000000~YAAQB08kFxzgEhaPAQAAuGPPHRcaU1CAXl7tvdK93X7MnCAWzTRlXwsVakbs5uPzF+7ChQJlGpLCrVibtC0RSz/yyid2LdqxeBvCHH+7SLVEkUN7FXP/C1Kd7LOCYStvc8bnk1A8jT+iasqQjEYaR9MC2Y86VnDtSzab0o2/2lWA8eN9nXmrLFjByaWtrbGz/1DKind/HgIzmlF2t27WgQPdaQ9ZKgnQP9E7+9/l2rLrvc7RCENRg0t6/jEBVQatpO0bFof4jOXzjQIZLuK5NWMUR4cqesWdXqSapKK4J1+pu1uYEZ9u6ygu5ihIxkyH0elXJCx5EU5Cf0o7JPGGNiqCP9y85cDYz56hfv0vTCpPehcyUiLMbrfWJrGygerERK4BB/a4hQ==; Domain=.my.commbank.com.au; Path=/; Expires=Sat, 27 Apr 2024 06:28:01 GMT; Max-Age=7200; HttpOnly
|
|
| practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css | 203.132.95.167 | 200 OK | 8.1 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeASCII text, with very long lines (31873), with no line terminators Hash8397238ab0ae7a25ea1af4d375f2c3df 299454f71219bb8827c6f131d396f167e6e69e6d 700303a27f1a898cfba0febbb9ef126ce76fad6ba65108d3b56c35ea973b73fb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/logon-merge.8397238ab0ae7a25ea1af4d375f2c3df.css HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html?Embedded=true
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true; cdSNum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:02 GMT
Content-Type: text/css
Content-Length: 8148
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "7c81-613f7f17e3c63-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.my.commbank.com.au/akam/13/pixel_59c1c6a4?a=dD1iMjgwMmJiZmI5N2E0NjYyMjk5MzliNTA5MjA0MWZjYTkwYjRkY2Q1JmpzPW9mZg== | 23.38.200.80 | | 0 B |
URL www.my.commbank.com.au/akam/13/pixel_59c1c6a4?a=dD1iMjgwMmJiZmI5N2E0NjYyMjk5MzliNTA5MjA0MWZjYTkwYjRkY2Q1JmpzPW9mZg== IP23.38.200.80:0
CertificateIssuerEntrust, Inc. Subjectmy.commbank.com.au Fingerprint72:14:DE:FE:3E:13:F8:F0:7B:67:2D:54:9E:9D:A2:7D:56:42:EF:AF ValidityMon, 03 Jul 2023 00:11:47 GMT - Sat, 27 Jul 2024 00:11:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /akam/13/pixel_59c1c6a4?a=dD1iMjgwMmJiZmI5N2E0NjYyMjk5MzliNTA5MjA0MWZjYTkwYjRkY2Q1JmpzPW9mZg== HTTP/1.1
Host: www.my.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 0
Date: Sat, 27 Apr 2024 04:28:02 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: ak_bmsc=8B855279EEB5DAFD5357589BE33B3590~000000000000000000000000000000~YAAQB08kFyXgEhaPAQAAxWbPHRdoZz/bsd7B2xVGRmeJPwnvRjwVLnt6X30ZGTli1+tbR/t6wVK059NQ5fcBAJeNinvd4unAXRzPlBxktHX/jEmDocjYlYk4P4o920aq95j/rxlHwaieBfbgMoUvkzACy+ueAdtQMSA66G6VOVLr3MU9tEW/Bv5hfwwqFSz4WVxFg6/8fMNu8sQeGZbIRMoIMa7bm0ze5AQS7NjfL/xgb66zItozHx3zkUEoGGqGdvllX0cXhqZFMCS22UVKptoJZJXuIR4F7BZd/6zYt4NTHudPcbxhRuYA2YG+URO8PdhM64Waq8yoxlddd2cTE2bQOobW4SwV5ub3xazORYWoDxgXWGb9tzahDGLMPsyQx/urD1ODRg==; Domain=.my.commbank.com.au; Path=/; Expires=Sat, 27 Apr 2024 06:28:02 GMT; Max-Age=7200; HttpOnly
|
|
| practice.net.au/115/Celeste/netbank_files/sign-out.html | 203.132.95.167 | 200 OK | 192 B |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/sign-out.html IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text Hash08bd33320bcaf5906de0e17f791a55c4 49614dad07ab3e15b7bdaf1cc544b7ba00a09dee 6503112546a3a65149b85d9adc9b4ce125abb68ba859566f4236aa4cf8c6e6eb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/sign-out.html HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html?Embedded=true
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true; cdSNum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:02 GMT
Content-Type: text/html
Content-Length: 192
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "df-613f7f17f0b6a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/signout.html | 203.132.95.167 | 200 OK | 231 B |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/signout.html IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeHTML document, ASCII text Hash75657b9074afd8a2452a0d2e12d0402d bcf2d8e1137e02b3fb89b620e3b0ab2223643329 ce237f166630bff12aadbddfef6ba22befa33876b94632e150e73964e47ade92
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/signout.html HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html?Embedded=true
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true; cdSNum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:02 GMT
Content-Type: text/html
Content-Length: 231
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "113-613f7f17f26c2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| practice.net.au/115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif | 203.132.95.167 | 200 OK | 4.9 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeGIF image data, version 89a, 256 x 46 Hashac9de6fb5214be84653367c74ba0b5f0 be61645ad75ab434ce7195268eb453f77314f9ec 4620bea7b8db9ffe1747e9c29910d7ea2ec84a7a3c7416e7a8a70e450073d820
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/cba_mainlogo.ac9de6fb5214be84653367c74ba0b5f0.gif HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html?Embedded=true
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true; cdSNum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:02 GMT
Content-Type: image/gif
Content-Length: 4852
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "12f4-613f7f17b9c87"
Accept-Ranges: bytes
|
|
| log-d8814f41.commbank.com.au/api/v1/sendLogs?cid=coco&cdsnum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167&csid=78666a46220d44ce947880137b130ce2&ds=js&sdkVer=2.19.2.465.37bfd51 | 20.53.196.14 | 204 No Content | 0 B |
URL POST HTTP/2log-d8814f41.commbank.com.au/api/v1/sendLogs?cid=coco&cdsnum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167&csid=78666a46220d44ce947880137b130ce2&ds=js&sdkVer=2.19.2.465.37bfd51 IP20.53.196.14:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerDigiCert Inc Subjectwup-d8814f41.commbank.com.au FingerprintF4:5C:B1:A8:F5:CF:DF:0D:82:E3:FE:DF:8F:3C:72:9C:5B:9A:F5:42 ValidityThu, 11 May 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v1/sendLogs?cid=coco&cdsnum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167&csid=78666a46220d44ce947880137b130ce2&ds=js&sdkVer=2.19.2.465.37bfd51 HTTP/1.1
Host: log-d8814f41.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 964
Origin: http://practice.net.au
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 27 Apr 2024 04:28:03 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| practice.net.au/115/Celeste/netbank_files/nb_messaging.jpg | 203.132.95.167 | 200 OK | 20 kB |
URL GET HTTP/1.1practice.net.au/115/Celeste/netbank_files/nb_messaging.jpg IP203.132.95.167:80
Requested byhttp://practice.net.au/115/Celeste/netbank.html
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 201x96, components 3 Hashd779b1b61319ff06a75e39bdb0fd19c8 4236b4e96960b4448b7bc8c9c06a2f674848b1d5 84ecea0bc8922edb4eaca036bf1f172a64d7034d04b274f45dfa1d59047a9295
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Commonwealth Bank |
GET /115/Celeste/netbank_files/nb_messaging.jpg HTTP/1.1
Host: practice.net.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/115/Celeste/netbank.html?Embedded=true
Cookie: cdContextId=2; bmuid=1714192078292-1E0BEC16-8255-4CA0-8802-28EA5486BE8B; at_check=true; cdSNum=1714192079280-sjn0000622-5e4fea1f-daf0-450a-90b8-f6d65478f167
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 27 Apr 2024 04:28:02 GMT
Content-Type: image/jpeg
Content-Length: 19693
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Mon, 18 Mar 2024 23:44:49 GMT
ETag: "4ced-613f7f17ed4bb"
Accept-Ranges: bytes
|
|
| wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco | 20.53.176.113 | 200 OK | 730 B |
URL POST HTTP/2wup-d8814f41.commbank.com.au/client/v3.1/web/wup?cid=coco IP20.53.176.113:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttp://practice.net.au/115/Celeste/netbank.html CertificateIssuerDigiCert Inc Subjectwup-d8814f41.commbank.com.au FingerprintF4:5C:B1:A8:F5:CF:DF:0D:82:E3:FE:DF:8F:3C:72:9C:5B:9A:F5:42 ValidityThu, 11 May 2023 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hashfb2e547d82a523d04a65071aa340fa01 b9eec00e5ef5b03c71368a5a5536e0e00999bf6f a099f0769575006899d820aaf5fc4fc3a4b78bf035783081e81298a2879c0eac
POST /client/v3.1/web/wup?cid=coco HTTP/1.1
Host: wup-d8814f41.commbank.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2890
Origin: http://practice.net.au
DNT: 1
Connection: keep-alive
Referer: http://practice.net.au/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 730
date: Sat, 27 Apr 2024 04:28:04 GMT
server: uvicorn
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache, no-store
pragma: no-cache
tail-id: 74a478b8-1349-4b4b-82d9-6d6973665c7c
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml |  35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=DOkxdjFPLjgrb-82--2_bUCAZTgc2AMBK8I3mbWFXfVRZyGvoe_JXM9NSgR91AyeMvcDFTotyQBcSsAxKUvaoWyi5brleTqLlxICXk73149vS_KnIeQPNdidNQEJvV2R
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Sat, 27 Apr 2024 04:27:30 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 44
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|