Report - zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php

Report Overview

Submitted URL
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
IP
162.241.24.233
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-19 17:48:56
Access
public
Website Title
Swisscom
Final URL
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Tags
swisscom telecommunication phishing
urlquery detections
Phishing - Swisscom

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zcs.ccw.mybluehost.me	unknown	2016-10-05	2024-03-19	2024-04-17	4.9 kB	133 kB	162.241.24.233
rcp.scsstatic.ch	587415	unknown	2016-11-13	2024-04-12	458 B	5.2 kB	195.186.211.248

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-07	medium	zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php	Swisscom IT Services AG

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-05-02
Pretty URL zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/jquery-3.3.1.min.js IP 162.241.24.233 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-02 19:07:52 Times Seen107782 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php	802 B	2023-04-07	2024-05-02
Pretty URL zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php IP 162.241.24.233 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-07 14:55:49 Last Seen2024-05-02 18:54:41 Times Seen751 Hash 3e32221dd57747bb401174156cbf32b0 2c15fe5b35f5458658021a80ff4926fc1b582d79 3e81720639b7823dfe684273ac3ef94fc62e2d24ffa575d520406fa1d1a6dc7c Loading...

	unknown	13 B	2023-04-13	2024-05-02
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-13 02:51:07 Last Seen2024-05-02 18:54:41 Times Seen868 Hash 2f9e9da0b42d94ccaf303dbde88e3df8 356b05598ff5ed65e06a8cefb50d8f2754f1de1e 08410b844c27d03d3ffc9f49221b043d082e3423312e52d5c1459cb3b4606cae Loading...

	zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php	0 B	2023-03-07	2024-05-02
Pretty URL zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php IP 162.241.24.233 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 19:11:14 Times Seen37279806 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (10)

URL IP Response Size

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php

162.241.24.233

200 OK

1.9 kB

URL User Request GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
1.9 kB (1907 bytes)
Hash
4c9ade7efdcb8bf7fdd3edb0cbc4416e
93919dbf4784385cb55b02b352e46e8d7171da65
8a13b619432d6a99b5cc686697a5377d336f08428c2a7e393fd918ac4b192e40

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Swisscom IT Services AG

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=7200
expires: Fri, 19 Apr 2024 19:48:31 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-length: 1907
content-type: text/html; charset=UTF-8
date: Fri, 19 Apr 2024 17:48:31 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/1.svg

162.241.24.233

200 OK

5.4 kB

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/1.svg
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
SVG Scalable Vector Graphics image
Size
5.4 kB (5367 bytes)
Hash
f01c19e87b69564b9fb3bced1b9648ac
77ac40deba756e36903259a874b2846d4a47e48d
9a5f3522a21cb1fe429249ad52660e8eef35596b30d8a866bcc6e4f6106e675c

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/1.svg HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
content-length: 5367
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/svg+xml
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/screen.css

162.241.24.233

200 OK

1.0 kB

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/screen.css
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
ASCII text
Size
1.0 kB (1044 bytes)
Hash
d5489eb7166fd73b28fb22ea367bfa4d
79ac8a9fc4834d0fe7a0084ca53b25e7a216af47
4240658116347f70eea6163be279c9c3680dd81cb5f06275bd6a733dab1a91fc

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/screen.css HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-length: 1044
content-type: text/css
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/logo2.png

162.241.24.233

200 OK

31 kB

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/logo2.png
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
PNG image data, 658 x 169, 8-bit/color RGBA, non-interlaced
Size
31 kB (31080 bytes)
Hash
0374965d5ba5f16b9eaaa6c6162b2aba
2965725ec42940885b9923c74f8600ccda8d08f4
5834b0280b63f25fdc4eb09317696a1851ec4e3e7b17b12e8c54e16ecb136ace

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Swisscom

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/logo2.png HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
content-length: 31080
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/png
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-buttons.css

162.241.24.233

200 OK

2.5 kB

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-buttons.css
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
ASCII text
Size
2.5 kB (2494 bytes)
Hash
8cc96a76635fc3181e2deb36c4ad90b6
520552bd984b7c11494b7d7ed931885cfd23271a
686251c35af3f83c0532d534a4df34651f06a875fe2b70a7f450c702106f2555

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-buttons.css HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-length: 2494
content-type: text/css
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gb.svg

162.241.24.233

200 OK

956 B

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gb.svg
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
SVG Scalable Vector Graphics image
Size
956 B (956 bytes)
Hash
fd72d9b5184b47afb2f7b4db0c8a35de
b2ec2be4e11781d768575819035f5f5631d16eff
d85f0f149b4390bed6624bc30ca2cbfa37d394f14474fcf81d63363ad363e284

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gb.svg HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
content-length: 956
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: image/svg+xml
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/commons.js

162.241.24.233

404 Not Found

315 B

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/commons.js
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/commons.js HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-icons.png

162.241.24.233

404 Not Found

315 B

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-icons.png
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-icons.png HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/gh-buttons.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

rcp.scsstatic.ch/etc/designs/portal/resources/favicon.ico

195.186.211.248

200 OK

4.3 kB

URL GET HTTP/1.1
rcp.scsstatic.ch/etc/designs/portal/resources/favicon.ico
IP
195.186.211.248:443
ASN
#3303 Bluewin

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerSwissSign AG
Subjectrcp.production.scsstatic.ch
FingerprintB7:D3:80:DA:8E:B3:59:99:BB:CE:B9:CB:C6:22:0A:76:82:0D:48:82
ValidityThu, 03 Aug 2023 15:37:27 GMT - Sat, 03 Aug 2024 15:37:27 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
3879541f5a42e91d65fc1939b3f40b45
4c855cae133255ed558c8a6593cb81fc7fbc87d5
33378d64ea729ba7e9b88800b05742916fd577806182fc87f01a4177069cce78

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Swisscom

HTTP Headers

GET /etc/designs/portal/resources/favicon.ico HTTP/1.1
Host: rcp.scsstatic.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 17:48:33 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 4286
Connection: keep-alive
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-Cache-Status: uncacheable
Access-Control-Allow-Methods: OPTIONS, POST
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: www.swisscom.ch
Referrer-Policy: origin
Cache-Control: public,max-age=31557600,immutable
Last-Modified: Fri, 19 Apr 2024 17:45:09 GMT
X-TTL: 3600.000
Accept-Ranges: bytes
age: 0
grace: 
X-Cache: HIT - 19
X-Cache-Hits: 19
X-UA-Compatible: IE=7,8,9,EDGE
Set-Cookie: TS04ae7033027=08d727f06cab200053cd7f701b1f9d455d03687eace11f9d7575f830f0168e57cce876a5564d68a808ca695fbe113000c4267a3eb70d081b1806f5955ae9c323095084adb369f9e49d2af2bcf451a7cb680ad2557013ab6eea0f15ef37d93571; Secure; Path=/

zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/jquery-3.3.1.min.js

162.241.24.233

200 OK

87 kB

URL GET HTTP/2
zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/jquery-3.3.1.min.js
IP
162.241.24.233:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Certificate
IssuerLet's Encrypt
Subjectmail.zcs.ccw.mybluehost.me
FingerprintEE:BF:07:C8:80:74:EB:FF:D8:43:F4:91:37:94:9E:34:67:44:30:29
ValidityTue, 19 Mar 2024 14:46:36 GMT - Mon, 17 Jun 2024 14:46:35 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

HTTP Headers

GET /yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/jquery-3.3.1.min.js HTTP/1.1
Host: zcs.ccw.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zcs.ccw.mybluehost.me/yarui/chebkhald/f3802b18533a32671b6ab7cf63ee1aed/smserror.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sun, 07 Apr 2024 09:31:20 GMT
accept-ranges: bytes
cache-control: max-age=86400
expires: Sat, 20 Apr 2024 17:48:32 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
content-type: application/javascript
date: Fri, 19 Apr 2024 17:48:32 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2