Report - app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index

Report Overview

Submitted URL
app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index
IP
91.208.207.142
ASN
#43424 Squark Sarl
Submitted
2024-04-20 03:59:59
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io	unknown	unknown	No data	No data	953 B	6.7 kB	91.208.207.142

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index	SwissPass
2024-04-19	medium	app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index/	SwissPass

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io	Sinkholed
2024-04-20	medium	app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index

91.208.207.142

280 B

URL
app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index
IP
91.208.207.142:0
ASN
#43424 Squark Sarl

File type
HTML document, ASCII text
Size
280 B (280 bytes)
Hash
e90b4fd8b011bf13a2d6a2a0db299065
c95d062701120c8f93ddbad87066c7f19de4643d
7ccf0f06aa66e6992cbaabde98dde062af65d5964b3b9110d7a803dd44c98a91

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	SwissPass
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /SBB/index HTTP/1.1
Host: app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sat, 20 Apr 2024 03:59:21 GMT
Server: Apache
Location: http://app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index/
Content-Length: 280
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Sozu-Id: 01HVWTH82DRNMHMY8JTNRB3Z5N

app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index/

91.208.207.141

5.6 kB

URL
app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io/SBB/index/
IP
91.208.207.141:0
ASN
#43424 Squark Sarl

File type
HTML document, Unicode text, UTF-8 text
Size
5.6 kB (5620 bytes)
Hash
0ec07c8b7a795693e2b1391b50ef75c9
6e133c13766410120bff64b672338bc8c6d2e123
4f22aa2ae02e38ea0ac63a6da6e1263c90da61c837aa45c16efa0055dbbfcf6c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	SwissPass
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /SBB/index/ HTTP/1.1
Host: app-449101a1-16c2-426d-84f5-c16e04babf17.cleverapps.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 03:59:21 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=516jidkdc3mfgobajjftsac943; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5620
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Sozu-Id: 01HVWTH88B17P6WYVXXRQS957N

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers