Report - rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1

Report Overview

Submitted URL
rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
IP
162.222.225.71
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-23 06:07:48
Access
public
Website Title
BankID
Final URL
rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Tags
bankid authentication
urlquery detections
Phishing - BankID

Detections

urlquery
13
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rctws.org	unknown	2014-10-22	2015-08-28	2024-04-22	6.0 kB	108 kB	162.222.225.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (0)

HTTP Transactions (12)

URL IP Response Size

rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

9.7 kB

URL User Request GET HTTP/2
rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
PHP script, ASCII text, with very long lines (12394), with CRLF line terminators
Size
9.7 kB (9689 bytes)
Hash
6effb597096bd289baef410a5917f852
32b1ddac9f02fe25ccc6bddb54705690d496e510
3b2587c395c137a1eb9c800c6a3a4b6a76d6e44ce35c25c5db81b02237dd448e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/personal.html?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
content-encoding: br
last-modified: Sun, 03 Mar 2024 23:08:29 GMT
accept-ranges: bytes
etag: "ebdab9b4bf6dda1:0"
vary: Accept-Encoding
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 9689
X-Firefox-Spdy: h2

rctws.org/kla/src/common_auth.css

162.222.225.71

302 Found

2.2 kB

URL GET HTTP/2
rctws.org/kla/src/common_auth.css
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
data
Size
2.2 kB (2158 bytes)
Hash
94e4fe3ba364da78ef45e293a967fdd8
8f7cf26b47bfca15c1cf6344c38c44da3886c785
e631a8b07ece82b699f41139d995a2f37e599ffc6d702410f1bdb45684b9adfc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/common_auth.css HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
location: /kla/src/common_auth.css?AspxAutoDetectCookieSupport=1
server: 
x-aspnet-version: 4.0.30319
set-cookie: AspxAutoDetectCookieSupport=1; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
X-Firefox-Spdy: h2

rctws.org/kla/logo21.svg

162.222.225.71

200 OK

2.7 kB

URL GET HTTP/2
rctws.org/kla/logo21.svg
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
SVG XML document
Size
2.7 kB (2655 bytes)
Hash
d80d18fb84812b6341272c84462f699e
e287f2a3218ca314b7f0d568fb0183020cf1cf07
221de385224594c0e5c9849021a5acc74fb711c2e1fa6524f0837c0fedf56168

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/logo21.svg HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
location: /kla/logo21.svg?AspxAutoDetectCookieSupport=1
server: 
x-aspnet-version: 4.0.30319
set-cookie: AspxAutoDetectCookieSupport=1; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
X-Firefox-Spdy: h2

rctws.org/kla/src/3625.css

162.222.225.71

302 Found

938 B

URL GET HTTP/2
rctws.org/kla/src/3625.css
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
data
Size
938 B (938 bytes)
Hash
311b481405ca58481a29b3e89ddc1df4
96b436fa6c01daff33d34f1809baa34de64608d6
8cf2d767583c5a10ed4b3ec87fe4784c90c2c5317cf9be93ca36cce7af1dd7e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/3625.css HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
location: /kla/src/3625.css?AspxAutoDetectCookieSupport=1
server: 
x-aspnet-version: 4.0.30319
set-cookie: AspxAutoDetectCookieSupport=1; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
X-Firefox-Spdy: h2

rctws.org/kla/src/bidm.css

162.222.225.71

302 Found

4.2 kB

URL GET HTTP/2
rctws.org/kla/src/bidm.css
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
data
Size
4.2 kB (4213 bytes)
Hash
d81644037f0bf4141da7978f1d2e18e3
3d3bb8a2bd0b3bccf780e4c3baecb19b0b70e471
8340b8061fcaec09a05587f0c9c29ce47eba5d5218fbdd185efbf98b43071ba4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/bidm.css HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
location: /kla/src/bidm.css?AspxAutoDetectCookieSupport=1
server: 
x-aspnet-version: 4.0.30319
set-cookie: AspxAutoDetectCookieSupport=1; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
X-Firefox-Spdy: h2

rctws.org/kla/logo1.png

162.222.225.71

302 Found

12 kB

URL GET HTTP/2
rctws.org/kla/logo1.png
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
data
Size
12 kB (12069 bytes)
Hash
0fb2709280a0cf436d6b29e63ae2ea60
d2c7ac92124a390f31ecee93a40e82f3afcbf953
b792dce538f7b1dd9b6b715dc38e2c2a193e47d52dff9ed06bab2f52a6347248

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/logo1.png HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
location: /kla/logo1.png?AspxAutoDetectCookieSupport=1
server: 
x-aspnet-version: 4.0.30319
set-cookie: AspxAutoDetectCookieSupport=1; path=/
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
X-Firefox-Spdy: h2

rctws.org/kla/logo21.svg

162.222.225.71

200 OK

2.5 kB

URL GET HTTP/2
rctws.org/kla/logo21.svg
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
SVG Scalable Vector Graphics image
Size
2.5 kB (2493 bytes)
Hash
c5fce2a36a79a179e22dbf57ab493921
4caa503846637f1d3a0857cb655c7d638a77cf1c
08f4f701110858ef66acdf89202cfe646b59fe610da792f22a97d1aea3490d32

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/logo21.svg HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Sun, 03 Mar 2024 23:08:29 GMT
accept-ranges: bytes
etag: "376b5b4bf6dda1:0"
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 2493
X-Firefox-Spdy: h2

rctws.org/kla/logo21.svg?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

2.5 kB

URL GET HTTP/2
rctws.org/kla/logo21.svg?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
SVG Scalable Vector Graphics image
Size
2.5 kB (2493 bytes)
Hash
5c5678b0628e42a4d4264c9f9dd6fab1
9b3a7eb8ce115a672baebe5d0cfe4a262f0314a2
5478fff2634e30a2cc6c38994bf4764dd7bdc282d7737a43f96b0d936ae3083f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/logo21.svg?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
DNT: 1
Connection: keep-alive
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Sun, 03 Mar 2024 23:08:29 GMT
accept-ranges: bytes
etag: "376b5b4bf6dda1:0"
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 2493
X-Firefox-Spdy: h2

rctws.org/kla/src/bidm.css?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

43 kB

URL GET HTTP/2
rctws.org/kla/src/bidm.css?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
ASCII text, with very long lines (1222), with CRLF line terminators
Size
43 kB (42882 bytes)
Hash
15ad390e981075722abd9aed7225e85f
1a6eae25e0a2d52cb6b8bf7fa97367bd985a58f7
31412635ed02fd2c9a9ac4c4d9093c0601a687cfe305aba0dea75c1943d7dd72

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/bidm.css?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
DNT: 1
Connection: keep-alive
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Sun, 03 Mar 2024 23:08:31 GMT
accept-ranges: bytes
etag: "80160b5bf6dda1:0"
vary: Accept-Encoding
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 4049
X-Firefox-Spdy: h2

rctws.org/kla/logo1.png?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

12 kB

URL GET HTTP/2
rctws.org/kla/logo1.png?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
PNG image data, 2000 x 1200, 8-bit colormap, non-interlaced
Size
12 kB (11908 bytes)
Hash
4ab3ff57598a596163e577fbc9a3550a
544ef9f06469198ec2d01ebaed5bb80621af5af1
7fbcb3628e9d79d89e9350ee5d075818cf0f6763d5fa8763ea78c13902d6691b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/logo1.png?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
DNT: 1
Connection: keep-alive
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
last-modified: Sun, 03 Mar 2024 23:08:29 GMT
accept-ranges: bytes
etag: "aa31b0b4bf6dda1:0"
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 11908
X-Firefox-Spdy: h2

rctws.org/kla/src/common_auth.css?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

8.9 kB

URL GET HTTP/2
rctws.org/kla/src/common_auth.css?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
ASCII text, with very long lines (9825), with no line terminators
Size
8.9 kB (8912 bytes)
Hash
95d0b3be971d3df480e949a9d022296d
246262ea57cc8302f2653dd5ef2901d7706e02d6
a62565a3ada3de21876ec42e8f4c348e33625340158a5aadf759309b44dd4edd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/common_auth.css?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
DNT: 1
Connection: keep-alive
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Sun, 03 Mar 2024 23:08:31 GMT
accept-ranges: bytes
etag: "80160b5bf6dda1:0"
vary: Accept-Encoding
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 1987
X-Firefox-Spdy: h2

rctws.org/kla/src/3625.css?AspxAutoDetectCookieSupport=1

162.222.225.71

200 OK

3.9 kB

URL GET HTTP/2
rctws.org/kla/src/3625.css?AspxAutoDetectCookieSupport=1
IP
162.222.225.71:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
Certificate
IssuerLet's Encrypt
Subjectrctws.org
Fingerprint43:31:48:C4:FE:45:45:9F:3F:3B:38:53:15:29:E3:F6:1E:52:E9:E1
ValidityMon, 26 Feb 2024 07:19:08 GMT - Sun, 26 May 2024 07:19:07 GMT

File type
ASCII text, with very long lines (4169), with no line terminators
Size
3.9 kB (3940 bytes)
Hash
06ad0e0892b887104c917b42e4d452a4
39397783c3659aacf0fca7684b87f15e6859b74c
63cbd11b153b23dba6b861a500cbf8c58d8cbb249fe56a2c77a0f1bcd3cd6059

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /kla/src/3625.css?AspxAutoDetectCookieSupport=1 HTTP/1.1
Host: rctws.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rctws.org/kla/personal.html?AspxAutoDetectCookieSupport=1
DNT: 1
Connection: keep-alive
Cookie: AspxAutoDetectCookieSupport=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-encoding: br
last-modified: Sun, 03 Mar 2024 23:08:30 GMT
accept-ranges: bytes
etag: "06bc7b4bf6dda1:0"
vary: Accept-Encoding
server: 
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
date: Tue, 23 Apr 2024 06:07:32 GMT
content-length: 774
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (0)

HTTP Transactions (12)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections