Report - s-abmil.de/home.html

Report Overview

Submitted URL
s-abmil.de/home.html
IP
195.140.52.54
ASN
#9099 Finanz Informatik GmbH & Co. KG
Submitted
2024-05-08 14:37:46
Access
public
Website Title
404
Final URL
www.s-abmil.de/home.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
40

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.quovadisglobal.com	4610	2005-01-28	2012-10-10	2024-05-08	1.0 kB	6.4 kB	192.16.49.125
s-abmil.de	unknown	unknown	No data	No data	474 B	623 B	195.140.52.54
www.s-abmil.de	unknown	unknown	2024-03-27	2024-03-28	17 kB	1.1 MB	195.140.52.35
module.s-abmil.de	unknown	unknown	No data	No data	854 B	1.9 kB	195.140.52.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank
2024-04-26	medium	www.s-abmil.de/	Sparkasse Bank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6a0050bc206f16510100c22cd0407e68.js	737 kB	2024-04-27	2024-05-15
Pretty URL www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6a0050bc206f16510100c22cd0407e68.js IP 195.140.52.35 ASN #9099 Finanz Informatik GmbH & Co. KG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-27 07:55:45 Last Seen2024-05-15 08:22:02 Times Seen14 Hash 6a0050bc206f16510100c22cd0407e68 0ac3105b3b6ea6b4fa3fd068aef310470d97e5d5 a5b45c5b67e77c6f806c23a54b9ef305c040e791a269c30f6174eba24476b1af Loading...

	www.s-abmil.de/home.html	52 B	2023-04-07	2024-05-15
Pretty URL www.s-abmil.de/home.html IP 195.140.52.35 ASN #9099 Finanz Informatik GmbH & Co. KG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-07 09:20:07 Last Seen2024-05-15 08:22:02 Times Seen55 Hash e394d89015ec32feef7fec1a90ffb224 3e7630c33322e637e2e1dc43d3abba7686c92d30 e4ed5065012d9b3950f2c776be0ad8a8f8f907460c5ebf94dc575f3d328c7b21 Loading...

	unknown	1.2 kB	2024-04-27	2024-05-15
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-27 07:55:45 Last Seen2024-05-15 08:22:02 Times Seen7 Hash bc5ec7ee4014fbfcd9cb49c870c48e4d 090ccd3dbc4851c80ce91ceade11e6b5fdf868c2 cfd3f2f95800193dc060bf20e040ec6ce58deb504fcc8aaef078853b9afabdfa Loading...

	www.s-abmil.de/home.html	203 B	2023-03-07	2024-05-15
Pretty URL www.s-abmil.de/home.html IP 195.140.52.35 ASN #9099 Finanz Informatik GmbH & Co. KG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:58:34 Last Seen2024-05-15 08:22:02 Times Seen41 Hash 17a0d0eebb13ba12d063e7f6d06fbb45 d5b4cfd9fda1308be944d84b82482bac1a26ca9f 58ee0cc0cc2f538c5aa5c889e25e41ec1edac0b84610f91eba5e0dd396984f46 Loading...

	www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/e2959746905f833f7ae4588dc8bb114b.min.38d061c8b117de3736cc24f2e424c162.js	83 kB	2024-04-27	2024-05-15
Pretty URL www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/e2959746905f833f7ae4588dc8bb114b.min.38d061c8b117de3736cc24f2e424c162.js IP 195.140.52.35 ASN #9099 Finanz Informatik GmbH & Co. KG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-27 07:55:45 Last Seen2024-05-15 08:22:02 Times Seen14 Hash 38d061c8b117de3736cc24f2e424c162 81c5008f2fd474d40d952ad0f2f9b3940a2e711f 313cb843956853460387736beedd03f3f063d8dd8c7c8533446d2d21246085de Loading...

HTTP Transactions (26)

URL IP Response Size

ocsp.quovadisglobal.com/

192.16.49.125

1.8 kB

URL
ocsp.quovadisglobal.com/
IP
192.16.49.125:0
ASN
#15133 EDGECAST

File type
data
Size
1.8 kB (1758 bytes)
Hash
2322a81c77101de0bfdf19447af53312
8e7c9df911c8bcc62b83f847aeeebc57a74a746f
6f5ad7b612c2857882fe88ca94f11896747b8154aa2c68c8080e79a19caae045

HTTP Headers

POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 14:38:10 GMT
Etag: "8e7c9df911c8bcc62b83f847aeeebc57a74a746f"
Expires: Fri, 10 May 2024 14:38:09 GMT
Last-Modified: Wed, 08 May 2024 14:38:10 GMT
Server: Apache
Content-Length: 1758

s-abmil.de/home.html

195.140.52.54

301 Moved Permanently

240 B

URL User Request GET HTTP/1.1
s-abmil.de/home.html
IP
195.140.52.54:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Certificate
IssuerQuoVadis Limited
Subjects-abmil.de
Fingerprint63:FE:51:BE:52:F5:A8:AA:C2:03:DE:1B:05:E9:1E:50:74:0A:3C:E2
ValidityWed, 27 Mar 2024 12:22:12 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
HTML document, ASCII text
Size
240 B (240 bytes)
Hash
b6f4d4a8478c580233ddbadb56447820
55eaa8e88f49db4fe0b4f4cc0b456d3643e7cfa0
d3643facc9e942ef0150e1346fc8bff5551045709d7f3f68426f1a6ec00ccb9d

HTTP Headers

GET /home.html HTTP/1.1
Host: s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Wed, 08 May 2024 14:37:20 GMT
Location: https://www.s-abmil.de/home.html
Content-Length: 240
Content-Type: text/html; charset=iso-8859-1
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TS01fda778=010bf2cd6c0d9fd8025cf684d866fe39d482c5998e37a4cb647d3d498c442e64c6afefd7820b1286cc0bc19d14769caa10c464dca8; Path=/; Secure

ocsp.quovadisglobal.com/

192.16.49.125

1.8 kB

URL
ocsp.quovadisglobal.com/
IP
192.16.49.125:0
ASN
#15133 EDGECAST

File type
data
Size
1.8 kB (1781 bytes)
Hash
5962720b196614159a3b690237450a98
dde640f9acd5bf3746ab76766e4001c14c9b16a1
250a1f71e35889e5e77e968fbab55ea59f70f68669a3c8786113d88aa349262e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3600
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 14:37:20 GMT
Etag: "dde640f9acd5bf3746ab76766e4001c14c9b16a1"
Expires: Fri, 10 May 2024 14:37:19 GMT
Last-Modified: Wed, 08 May 2024 13:37:37 GMT
Server: ECAcc (bog/A712)
X-Cache: HIT
Content-Length: 1781

www.s-abmil.de/home.html

195.140.52.35

404 Not Found

81 kB

URL User Request GET HTTP/1.1
www.s-abmil.de/home.html
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1064)
Size
81 kB (80821 bytes)
Hash
cb3a7776b4a0d7bcbebc12a8461075d9
04d8ee397c0ffceb52e1f2d8c8abcf286a0a694d
e9ef1ce0208008916980abbbbc8c43643575ce1c29477ec82a80edb636eb7ed9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /home.html HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 14:37:21 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 04:00:07 GMT
ETag: "13bb5-617e9568c3f0f"
Accept-Ranges: bytes
Content-Length: 80821
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: text/html; charset=UTF-8
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; Path=/; Secure
TSf693b41f027=081bb9e216ab2000ee249079f729a1607dc53ac2c0c95aee8767f61cdac0478f0902500e6c6d7c31089359482a1130003a841d5757df43701339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5; Secure; Path=/

www.s-abmil.de/home.html

195.140.52.35

404 Not Found

81 kB

URL User Request GET HTTP/1.1
www.s-abmil.de/home.html
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1064)
Size
81 kB (80820 bytes)
Hash
c7da15a72c74ffd1e4c9a49e7e435a23
f57ce2b96c863ba9f61b9ef5793d071547368a17
980a98f12d3c304b9024f80361e14d004768db7f57c8ba17276c0331e86aa535

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /home.html HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ee249079f729a1607dc53ac2c0c95aee8767f61cdac0478f0902500e6c6d7c31089359482a1130003a841d5757df43701339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 14:37:21 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 04:00:05 GMT
ETag: "13bb4-617e9566ee81e"
Accept-Ranges: bytes
Content-Length: 80820
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: text/html; charset=UTF-8
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css

195.140.52.35

200 OK

279 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
ASCII text, with very long lines (621)
Size
279 kB (279217 bytes)
Hash
540efcac8c74e90ddb95dffa2d7cdd07
9281d8630e98bf09f45881db6029b291cf7daa80
069dab1f60ecd6c2c57a5903ab4f63f4f08ee888bfeab2f46c3cf9eb047e3b0a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:21 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:14 GMT
ETag: "2c7085-617e945217a61"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Frame-Options: DENY
Cache-Control: max-age=2592000
Content-Type: text/css
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab20006e1d9708f527643a13899132b2adeabe210e84d92e1ee3aa057d8833428a551608edf56845113000257ca0fa0d82ffba1339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5; Secure; Path=/
Transfer-Encoding: chunked

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/e2959746905f833f7ae4588dc8bb114b.min.38d061c8b117de3736cc24f2e424c162.js

195.140.52.35

200 OK

30 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/e2959746905f833f7ae4588dc8bb114b.min.38d061c8b117de3736cc24f2e424c162.js
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JavaScript source, ASCII text, with very long lines (65514), with CRLF line terminators
Size
30 kB (29680 bytes)
Hash
38d061c8b117de3736cc24f2e424c162
81c5008f2fd474d40d952ad0f2f9b3940a2e711f
313cb843956853460387736beedd03f3f063d8dd8c7c8533446d2d21246085de

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/e2959746905f833f7ae4588dc8bb114b.min.38d061c8b117de3736cc24f2e424c162.js HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:21 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:12 GMT
ETag: "144df-617e944fed9a8"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Frame-Options: DENY
Cache-Control: max-age=2592000
Content-Length: 29680
Content-Type: text/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000d7dffec8408be258bc35a611eed37c282d38c553cc521c2fc8213a397fc98c340853ac55781130005158625adec6ac4f1339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6a0050bc206f16510100c22cd0407e68.js

195.140.52.35

200 OK

176 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6a0050bc206f16510100c22cd0407e68.js
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (578)
Size
176 kB (175849 bytes)
Hash
6a0050bc206f16510100c22cd0407e68
0ac3105b3b6ea6b4fa3fd068aef310470d97e5d5
a5b45c5b67e77c6f806c23a54b9ef305c040e791a269c30f6174eba24476b1af

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6a0050bc206f16510100c22cd0407e68.js HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:21 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:12 GMT
ETag: "b4044-617e944feaac2"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Frame-Options: DENY
Cache-Control: max-age=2592000
Content-Type: text/javascript
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000888cdb33c1f26c633d6e87dd18f2f950c0ac385d2b321d7c527410e9ed134462086d44c009113000dc40ad48d168259f1339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5; Secure; Path=/
Transfer-Encoding: chunked

ocsp.quovadisglobal.com/

192.16.49.125

1.8 kB

URL
ocsp.quovadisglobal.com/
IP
192.16.49.125:0
ASN
#15133 EDGECAST

File type
data
Size
1.8 kB (1781 bytes)
Hash
3a113933f409936d837be6a533b8200d
d67a0a55f3ec53cb2af6e87e4a447b0f1ce77c73
451ee2cb1413659ef493998f149bc897344776861fc7d92f321d8aa713b2961d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.quovadisglobal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 87
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2999
Cache-Control: max-age=155519,public,no-transform,must-revalidate
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 14:37:22 GMT
Etag: "d67a0a55f3ec53cb2af6e87e4a447b0f1ce77c73"
Expires: Fri, 10 May 2024 14:37:21 GMT
Last-Modified: Wed, 08 May 2024 13:47:22 GMT
Server: ECAcc (bog/A712)
X-Cache: HIT
Content-Length: 1781

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/ab7846997b88e6dd9d4ace8067e3be0d.svg

195.140.52.35

200 OK

976 B

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/ab7846997b88e6dd9d4ace8067e3be0d.svg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
SVG Scalable Vector Graphics image
Size
976 B (976 bytes)
Hash
ded83d1c7a25f03808b17bca73c733f0
ddf09a7655389a0e3c494a3e01344c309da498e9
f4e07d2fb57dd99f228e0d5b6e4e7a8d051ae49bb9643d850ac10369a6158e35

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/ab7846997b88e6dd9d4ace8067e3be0d.svg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:15 GMT
ETag: "3d0-617e945234144"
Accept-Ranges: bytes
Content-Length: 976
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/svg+xml
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab200067db74432b749430871209731bb19f20466cf8a5268259f2aca10a74e70759f40863ea787c1130009eb5e13d0c938f92f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/5716623032c694882944af0889e75fc9.jpg

195.140.52.35

200 OK

12 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/5716623032c694882944af0889e75fc9.jpg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 153x197, components 3
Size
12 kB (12407 bytes)
Hash
cd795ccee3a3a9f091a67b8f3bac6bf8
4325e5b79e5e0c6d097503f59c5fc3fab86a8f66
86e78428738d493ed9576a37d08092a439eb0d248694bb4021c781e85b90196d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/5716623032c694882944af0889e75fc9.jpg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:14 GMT
ETag: "3077-617e945229564"
Accept-Ranges: bytes
Content-Length: 12407
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/jpeg
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab200009a6e9d37632cec5441f31435ce66a8c6c8ca4adbd7d73a89184397975480ac3082eaf3ca211300074a12950997c500cf96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/9604b8226581b3d909c62c7f28df6820.png

195.140.52.35

200 OK

20 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/9604b8226581b3d909c62c7f28df6820.png
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
PNG image data, 1000 x 386, 8-bit/color RGBA, non-interlaced
Size
20 kB (19581 bytes)
Hash
5a3ae1b61f551fcbb045384d76521da2
64c161e7e5775ea2de4960fbb9a13b745a557b2a
ec02cf339295113a7d8a494641e1cf7eb6c7688076bbe654eceb156ab1e0319f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/9604b8226581b3d909c62c7f28df6820.png HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:13 GMT
ETag: "4c7d-617e94508fd82"
Accept-Ranges: bytes
Content-Length: 19581
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/png
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000fc92d5827a71a48cda7d16c897c3938f4817c56d9c96be5868ce2e60fe54a65508ebac80e1113000f28d635c23ce8e2af96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/ec968320f59b9d8ed8d71683fe447e25.svg

195.140.52.35

200 OK

9.9 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/ec968320f59b9d8ed8d71683fe447e25.svg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
SVG Scalable Vector Graphics image
Size
9.9 kB (9909 bytes)
Hash
8ec561eb80187938fa1d561deb3c3e01
f4339b7c1673a24a24020c9590f5f20cb2da39a1
40efcf47e868c9d825cf18857111f4f5cf41b7d06236e92212ba6381e400cc40

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/ec968320f59b9d8ed8d71683fe447e25.svg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:15 GMT
ETag: "26b5-617e9452b9261"
Accept-Ranges: bytes
Content-Length: 9909
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/svg+xml
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000da2f90a2783a22da1eb84136808f62a098d9b7fd7180be8ab7f3733bd34f7071089ff7c06b11300011d5635b679793c9f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/a9139593585904457d5bdb867b840686.jpg

195.140.52.35

200 OK

6.4 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/a9139593585904457d5bdb867b840686.jpg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 281x170, components 3
Size
6.4 kB (6388 bytes)
Hash
93d9dec879f3ec78646aacb4afb915cd
6265cdc99d0c5dfd7939a29653dc737b84e491d7
6ec181fe23e806f518a065dc0e32c92b1083ab26b996a915674589a8f2fab26a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/a9139593585904457d5bdb867b840686.jpg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:15 GMT
ETag: "18f4-617e9452b8a91"
Accept-Ranges: bytes
Content-Length: 6388
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/jpeg
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab20002f01641b1a95fe3513ae0e42d6ddda201352137b7a1ce7ef2d8cf024967218db08fca04f721130006a9a1b0a558f24aef96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/1005f0a458ce21b5b1a2a9fee4200d7f.svg

195.140.52.35

200 OK

9.9 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/1005f0a458ce21b5b1a2a9fee4200d7f.svg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
SVG Scalable Vector Graphics image
Size
9.9 kB (9909 bytes)
Hash
1c701f2cfa3d99c94468f258ed597987
4020a27fb7b0987fc3b48cf185a83987591ff45f
7e0bc7e3724bb228c91c553dab326da527005e52631c02de59bd4978661cb759

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/1005f0a458ce21b5b1a2a9fee4200d7f.svg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:13 GMT
ETag: "26b5-617e945090552"
Accept-Ranges: bytes
Content-Length: 9909
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/svg+xml
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab20007f2082baf68723bd46dcd366e7ab01d100ff4e10f4fd82cc40b4143f580bde200868b53b7a1130008a8620c3e0f52ff8f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/3cb714503123bf6b42bc639f8a95cf4d.jpg

195.140.52.35

200 OK

78 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/3cb714503123bf6b42bc639f8a95cf4d.jpg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 626x750, components 3
Size
78 kB (77928 bytes)
Hash
1631fe89c7116ff0f68ef2678af3cb1a
e490dba0200185cc717f6fff4f9de5d9ecb4e119
db914829e36a36a2367b586c61ed6d9d161abb91df22aa24d783cd295000ee67

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/3cb714503123bf6b42bc639f8a95cf4d.jpg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:13 GMT
ETag: "13068-617e94508f99a"
Accept-Ranges: bytes
Content-Length: 77928
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/jpeg
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab20009ef0711e549c8bd1f49242b5543e407c0c8525b1d719db8dc01cb8ec43430a3a088aad09fc113000e471562eb111f3e1f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/951f0655e565146545403136ce343458.jpg

195.140.52.35

200 OK

16 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/951f0655e565146545403136ce343458.jpg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 138x197, components 3
Size
16 kB (16237 bytes)
Hash
9935fa1cafe774e9fa5842bad2a5ee10
fed2a637a0becefb27024b537ff107827f576a96
b54bd0846f107eab431bc7e37c9a14b7091da2c48354b5f22e89cff515718aff

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/951f0655e565146545403136ce343458.jpg HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab2000ff5d26e4e065dd587afdb32d96430dc0a461314c283ee13436a660a378637cda08e3241cf41130004dbfeafb23a771991339df79cce06761badd3344fc7c70f4911d6af363f29880674631f9aeb6ebbcda64c8de1ea59da5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:15 GMT
ETag: "3f6d-617e9452b9649"
Accept-Ranges: bytes
Content-Length: 16237
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/jpeg
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000743d8f910129f3b68e6115036856692ffbd64124da6f9f5bd2372fd56fa5ee2908e1a35a40113000f86c04e18a532db7f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

module.s-abmil.de/if/services/tdg

195.140.52.35

45 B

URL
module.s-abmil.de/if/services/tdg
IP
195.140.52.35:0
ASN
#9099 Finanz Informatik GmbH & Co. KG

File type
GIF image data, version 89a, 1 x 1
Size
45 B (45 bytes)
Hash
9323cda5b644259fe90fd8625c7e66c9
b16b47d625d876833220e756403721260923f85f
62cfb054088e29a0e576b434030c236c6101af0599e6f55cfe89b35a6186fba4

HTTP Headers

GET /if/services/tdg HTTP/1.1
Host: module.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Length: 45
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-store, no-cache=set-cookie
Content-Language: de-DE
Vary: User-Agent
Content-Type: image/gif
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: JSESSIONID=0000YaZeoI8LejAsA-PPQzMTmV1:35e0d42ef; Path=/; Secure; HttpOnly; SameSite=lax
TS01fda778=010bf2cd6c2df5f62ccc1d3d3f2e60c1ee03ed908f75134756f42acc7b3e87eb4ad3bde67aa0fb3ec5655ab093726719b437e8baa3965b7073bf36e0fd0033883b0cd161a8; Path=/; Secure
TSf693b41f027=081bb9e216ab2000625baf1842d3f3dd7ac0ab646d02cc9d4f269415f15733f321a76785c25ac74e08c727a744113000ea2592bca56cbbcff96132cad2d119ad9055d1de47097b233e0405cf10603af0ab04114b27bd7bb85980d4208c0486d0; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0e6d52482d202f1d2903b31bffd387b9.woff

195.140.52.35

200 OK

25 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0e6d52482d202f1d2903b31bffd387b9.woff
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
Web Open Font Format, TrueType, length 25076, version 0.0
Size
25 kB (25076 bytes)
Hash
b1a37aec8a915b633ed040bab5213e3a
278d6e0d619204d1c74318c2c9d0c33dc9fa8abd
43a2c75ca73d8c1101ff7ae617e6dbc6934e8aa1cd72d64ce50908ac297156cb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/0e6d52482d202f1d2903b31bffd387b9.woff HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab20002f01641b1a95fe3513ae0e42d6ddda201352137b7a1ce7ef2d8cf024967218db08fca04f721130006a9a1b0a558f24aef96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:18 GMT
ETag: "61f4-617e945547b45"
Accept-Ranges: bytes
Content-Length: 25076
X-Frame-Options: DENY
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: font/woff
Set-Cookie: TSf693b41f027=081bb9e216ab2000f960e34ea038dbcf30291014563d935b0d136c24c79248f3b3e01edc35df6012089ad2c2241130000c4c2072bfa8b246f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/8a097d2025456718f4b193771f374d3b.woff

195.140.52.35

200 OK

25 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/8a097d2025456718f4b193771f374d3b.woff
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
Web Open Font Format, TrueType, length 25204, version 0.0
Size
25 kB (25204 bytes)
Hash
3c9288223036c20cfdfa596719504cd5
81302d27ee414265631a871a5c3cd14304c0f087
9ae3f33664fc3b273913900b81d8812d5a6a3c098b86d93d1f0ec54259d9441d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/8a097d2025456718f4b193771f374d3b.woff HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab20009ef0711e549c8bd1f49242b5543e407c0c8525b1d719db8dc01cb8ec43430a3a088aad09fc113000e471562eb111f3e1f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:14 GMT
ETag: "6274-617e945222a29"
Accept-Ranges: bytes
Content-Length: 25204
X-Frame-Options: DENY
Vary: User-Agent
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: font/woff
Set-Cookie: TSf693b41f027=081bb9e216ab2000726ddfe014b9ff0aa979fa47a03b4200186fae9426071f4d8d4bc9b70a5cf3bc08dda28f3c1130007f1a64d7d76e2456f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/55a5bda5d020abf10ce4f03beaf43764.woff

195.140.52.35

200 OK

25 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/55a5bda5d020abf10ce4f03beaf43764.woff
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
Web Open Font Format, TrueType, length 24804, version 0.0
Size
25 kB (24804 bytes)
Hash
9151e3d763b34bf1b6e812f705198bf9
ed2d1e5abf8b173b336be7752b3a23d97beb4e10
0d764d392e1685a777c2740c836285ddf29fc29f29b63c19546baf104c2de3d5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/55a5bda5d020abf10ce4f03beaf43764.woff HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab20009ef0711e549c8bd1f49242b5543e407c0c8525b1d719db8dc01cb8ec43430a3a088aad09fc113000e471562eb111f3e1f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:15 GMT
ETag: "60e4-617e9452c6551"
Accept-Ranges: bytes
Content-Length: 24804
X-Frame-Options: DENY
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: font/woff
Set-Cookie: TSf693b41f027=081bb9e216ab200003ced572e72347815e8209033af08b356ec66819deb7e1648f4fbccf563632b5081f9353fc113000968b9b4e67649600f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/539c3852d8b492a258c7ddbb6ee1fa95.woff

195.140.52.35

200 OK

25 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/539c3852d8b492a258c7ddbb6ee1fa95.woff
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
Web Open Font Format, TrueType, length 25248, version 0.0
Size
25 kB (25248 bytes)
Hash
5bc06337fb487ad72bca567af5089c65
a3e876927b4fa9a670db74a12bfacea2aca7e27d
7b2888ded6c1e95affe8813aaba8fbcd060d774451c10afa71227616e9af159f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/539c3852d8b492a258c7ddbb6ee1fa95.woff HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab20002f01641b1a95fe3513ae0e42d6ddda201352137b7a1ce7ef2d8cf024967218db08fca04f721130006a9a1b0a558f24aef96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:12 GMT
ETag: "62a0-617e944fefcca"
Accept-Ranges: bytes
Content-Length: 25248
X-Frame-Options: DENY
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: font/woff
Set-Cookie: TSf693b41f027=081bb9e216ab20004e954d62346b78ff6d515c4441ae38cdde500835446a822cc387a5369161c5ac0891faccb7113000d9d1a22ae3c9efc3f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/9592286c794756196402dcbde69ae362.woff

195.140.52.35

200 OK

210 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/9592286c794756196402dcbde69ae362.woff
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
Web Open Font Format, TrueType, length 210320, version 1.0
Size
210 kB (210320 bytes)
Hash
57a5e83be64836f1f6d76a8933ebf44d
36f82f2e6a81c38c5ebae533707d17e5c5d444ac
5706622f56a9d55053b778d797260c4ff05ce65c3402d0df06b1c5ddf59496a5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/etc/9592286c794756196402dcbde69ae362.woff HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/errorpage/spk-aschaffenburg/de/etc/0eee1ee9649eef97ce962042f4f429e1.min.6ad400936307aede5f41159c41601bd1.css
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab20002f01641b1a95fe3513ae0e42d6ddda201352137b7a1ce7ef2d8cf024967218db08fca04f721130006a9a1b0a558f24aef96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:14 GMT
ETag: "33590-617e9452216a1"
Accept-Ranges: bytes
Content-Length: 210320
X-Frame-Options: DENY
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: font/woff
Set-Cookie: TSf693b41f027=081bb9e216ab2000bb7dd669e04a2e748f444b52940a533702348e111716502fe4b24a59b4460e4f082cfd5f95113000afb09c5b1a46a4c9f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/741e7a87001a7d35289a532d54da580a.png

195.140.52.35

200 OK

1.8 kB

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/741e7a87001a7d35289a532d54da580a.png
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
1.8 kB (1829 bytes)
Hash
6371e51806dc8417fdca081a5b3b790f
60f6247a2d7d9656e4042c31cdf5323f4265875b
70718559e06e4f00752feb8a7ced473f42875d45b181d89d49d76991e7cb5d7a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/741e7a87001a7d35289a532d54da580a.png HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab200003ced572e72347815e8209033af08b356ec66819deb7e1648f4fbccf563632b5081f9353fc113000968b9b4e67649600f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:13 GMT
ETag: "725-617e9450e7f26"
Accept-Ranges: bytes
Content-Length: 1829
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/png
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab20001453e6c8c8670bbb2857c8a933fc41f9ca6d6329b557a28bb560b200de32ec56084fa382f0113000b96a41bd5f59a235f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/a41bc297150c0915704464ed2e0c0552.png

195.140.52.35

200 OK

296 B

URL GET HTTP/1.1
www.s-abmil.de/errorpage/spk-aschaffenburg/de/dam/a41bc297150c0915704464ed2e0c0552.png
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectwww.s-abmil.de
Fingerprint5B:30:89:EB:24:C8:93:A3:A3:72:E5:A7:3A:02:50:39:08:DA:3D:E9
ValidityWed, 27 Mar 2024 12:23:50 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
MS Windows icon resource - 1 icon, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Size
296 B (296 bytes)
Hash
47eb2096b512df6bf2295ef2b3ff1bbf
4110aab4d22d8337dbfdb71051f46dc5d4b226a1
e5f816492f591a3d16c6468aaee7710c96f401939fa1041cd78f29a4b80395a1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /errorpage/spk-aschaffenburg/de/dam/a41bc297150c0915704464ed2e0c0552.png HTTP/1.1
Host: www.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/home.html
Cookie: TS01fda778=010bf2cd6c6a12c68b9ad46de2ba2ffb302c4d401b478546fdbeece31e5d15b9cdff1156acce50f5377e384e7d04e942b2bcca3873; TSf693b41f027=081bb9e216ab200003ced572e72347815e8209033af08b356ec66819deb7e1648f4fbccf563632b5081f9353fc113000968b9b4e67649600f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
Last-Modified: Wed, 08 May 2024 03:55:12 GMT
ETag: "128-617e944fe06b2"
Accept-Ranges: bytes
Content-Length: 296
X-Frame-Options: DENY
Vary: User-Agent
Content-Type: image/png
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: TSf693b41f027=081bb9e216ab2000523d35ad97f23bea08b5eb6f2efa05ead129cb51c8667028ecac4c4120a8e8dd08477ff51f11300087a4fba4fa9f95b0f96132cad2d119add6949011106bac5881d7f03d93b29dac191355e1132b37b9afd1ae6afae46c0f; Secure; Path=/

module.s-abmil.de/if/services/tdg

195.140.52.35

200 OK

45 B

URL GET HTTP/1.1
module.s-abmil.de/if/services/tdg
IP
195.140.52.35:443
ASN
#9099 Finanz Informatik GmbH & Co. KG

Requested by
https://www.s-abmil.de/home.html
Certificate
IssuerQuoVadis Trustlink B.V.
Subjectmodule.s-abmil.de
FingerprintC1:AB:D6:15:F6:FD:D8:13:F6:D4:36:90:49:8B:1A:DA:0C:9B:6E:4B
ValidityWed, 27 Mar 2024 12:23:45 GMT - Sat, 31 Aug 2024 23:45:00 GMT

File type
GIF image data, version 89a, 1 x 1
Size
45 B (45 bytes)
Hash
9323cda5b644259fe90fd8625c7e66c9
b16b47d625d876833220e756403721260923f85f
62cfb054088e29a0e576b434030c236c6101af0599e6f55cfe89b35a6186fba4

HTTP Headers

GET /if/services/tdg HTTP/1.1
Host: module.s-abmil.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.s-abmil.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 14:37:22 GMT
X-UA-Compatible: IE=edge
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Length: 45
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: no-store, no-cache=set-cookie
Content-Language: de-DE
Vary: User-Agent
Content-Type: image/gif
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Set-Cookie: JSESSIONID=0000YaZeoI8LejAsA-PPQzMTmV1:35e0d42ef; Path=/; Secure; HttpOnly; SameSite=lax
TS01fda778=010bf2cd6c2df5f62ccc1d3d3f2e60c1ee03ed908f75134756f42acc7b3e87eb4ad3bde67aa0fb3ec5655ab093726719b437e8baa3965b7073bf36e0fd0033883b0cd161a8; Path=/; Secure
TSf693b41f027=081bb9e216ab2000625baf1842d3f3dd7ac0ab646d02cc9d4f269415f15733f321a76785c25ac74e08c727a744113000ea2592bca56cbbcff96132cad2d119ad9055d1de47097b233e0405cf10603af0ab04114b27bd7bb85980d4208c0486d0; Secure; Path=/

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (26)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash