| 10.231.109.208.host.secureserver.net/ |  208.109.231.10 | | 167 B |
URL 10.231.109.208.host.secureserver.net/ IP208.109.231.10:0 ASN#26496 AS-26496-GO-DADDY-COM-LLC
File typeHTML document, ASCII text, with no line terminators Hashf0145bc413ad069ac195c2cb0491e7ac 4795aa06b51f04dd52a42693039626921e913d9c 32e05695aabdf860587efd7dc9fbd583fed7c8f2ce5b2336a67ab967b60c2a78
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET / HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: text/html
content-length: 167
last-modified: Fri, 17 May 2024 15:02:22 GMT
etag: "6647717e-a7"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/js/all.min.js |  104.17.25.14 | 200 OK | 447 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/js/all.min.js IP104.17.25.14:443
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65317) Size447 kB (447131 bytes) Hashf0b7e001e9f8a42f5ac1c1cd612b4a66 9ff3cfb2e15856f9b77bdda2661876614f46a245 75ca5d1ab7947e7c19b4914a8ebaf31f5ef8547fee7fe3c4b49125fa9159fee4
GET /ajax/libs/font-awesome/6.0.0/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 447131
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "620188b3-6d29b"
last-modified: Mon, 07 Feb 2022 21:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 47710
expires: Thu, 08 May 2025 06:50:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fnJcSW1bwlrWo%2Bie4DWi0wIqZPaCLlTRsgkN%2BdiS%2FtAn6kUtyVnEe6d3lKk%2F%2Fip92YA7bxCsR1v2Y2CRfpxB4u52cbAHC4KYuh9c1XPZmUjXS1%2FFPG6EtCxGjiaDnc2tbPCJ%2FxuX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8859e944fd4b56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/mukta/v14/iJWKBXyXfDDVXbnBrXw.woff2 | 216.58.207.227 | 200 OK | 21 kB |
URL GET HTTP/2fonts.gstatic.com/s/mukta/v14/iJWKBXyXfDDVXbnBrXw.woff2 IP216.58.207.227:443
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20552, version 1.0 Hashd99795212c7f43e8650770f064849417 f896e56cdb1d2f3ff2a4543f2f9384b0254ea4a0 7ed7103cf260025b17419c7e5b364f742d87430eff60e586a924cd3cfc1d528a
GET /s/mukta/v14/iJWKBXyXfDDVXbnBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://10.231.109.208.host.secureserver.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 May 2024 09:01:51 GMT
expires: Fri, 16 May 2025 09:01:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:48:25 GMT
content-type: font/woff2
age: 164897
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/ | 208.109.231.10 | 200 OK | 3.7 kB |
URL User Request GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/ IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typegzip compressed data, from Unix Hash6d24d0436a3c7380ba81bd84c11c58c6 15c3cdaa898a6ac09c00173ca747667389f38a7a 2de916ad958b579be10693906f0f493f579c3a3d30833b8b31e73a9d44d7f78c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/ HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/mukta/v14/iJWHBXyXfDDVXbF6iGmd8WA.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/mukta/v14/iJWHBXyXfDDVXbF6iGmd8WA.woff2 IP216.58.207.227:443
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21580, version 1.0 Hash9dae32dd3bac26b45dc021e906eda22c 02e6c66cbe63de4446c8056d0f8bb92d98ce9ab4 12cbb41de25227eefa9b187395bd3adf650671499098ac9b06b359d28647c046
GET /s/mukta/v14/iJWHBXyXfDDVXbF6iGmd8WA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://10.231.109.208.host.secureserver.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 May 2024 23:10:58 GMT
expires: Fri, 16 May 2025 23:10:58 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:28:53 GMT
content-type: font/woff2
age: 113950
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/mukta/v14/iJWHBXyXfDDVXbFqj2md8WA.woff2 | 216.58.207.227 | 200 OK | 21 kB |
URL GET HTTP/2fonts.gstatic.com/s/mukta/v14/iJWHBXyXfDDVXbFqj2md8WA.woff2 IP216.58.207.227:443
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21140, version 1.0 Hashcbd267bc765067b15567aa3d0d617794 f7dd8c99d6e561c0d29060d95711102d2419cc32 18efe70c0ef13ab8ccac687d4cfd1a56e6acc691ec1bd7f242127e5cc0d6afd2
GET /s/mukta/v14/iJWHBXyXfDDVXbFqj2md8WA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://10.231.109.208.host.secureserver.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21140
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 May 2024 08:23:14 GMT
expires: Fri, 16 May 2025 08:23:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:48:19 GMT
content-type: font/woff2
age: 167214
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/js/html5shiv.min.js | 208.109.231.10 | 200 OK | 1.9 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/js/html5shiv.min.js IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typegzip compressed data, from Unix Hash673fd71ca759ec5a7b5ad22bd07f41fb 7edef626225a0ee0ccf109ab8dfb9e2855ce24c0 b5020d9d96441e49a530773cc6f8f5cabd6d27f20c1d809b9ffbef27141fb497
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/js/html5shiv.min.js HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript
last-modified: Mon, 21 Aug 2017 22:37:38 GMT
vary: Accept-Encoding
etag: W/"599b60b2-aaa"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/js/jquery.mask.js | 208.109.231.10 | 200 OK | 13 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/js/jquery.mask.js IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typegzip compressed data, from Unix Hash725414f3264f276881d531f5f9d9cce9 9cb81b820673f2f51c7b3090ba97bb04994f0ded 511db9feaaba0f2f3d6113b8a99c6aaaa791d0cae50731df6f39cdcd0ca37775
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/js/jquery.mask.js HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 15:30:48 GMT
vary: Accept-Encoding
etag: W/"5e7a27a8-5a88"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/css/test.css | 208.109.231.10 | 200 OK | 12 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/css/test.css IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typegzip compressed data, from Unix Hasha41039b5372348f57d010437f8033332 a4367e8f9fb5cc25ee796c2a6386d626cba602e4 11b08abe849cf7b6ef8471d372c2dbfbbec5f17470f7888214dd4c3b13f24f59
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/css/test.css HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: text/css
last-modified: Wed, 21 Feb 2024 03:25:02 GMT
vary: Accept-Encoding
etag: W/"65d56d0e-91d"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/image/logo.svg | 208.109.231.10 | 200 OK | 6.2 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/image/logo.svg IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typeSVG Scalable Vector Graphics image Hash7381cdcbce2523a084f171e8a6e5fcb6 c6949b26a191cbf6eedb5bcae00515ebc7df7bf9 9bd85c27c040d0239a0df93308d4a5de256af7444d4b5d9c8fea7197b61b85c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/image/logo.svg HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 17:10:16 GMT
vary: Accept-Encoding
etag: W/"65d4dcf8-1813"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/image/lg_ft.png | 208.109.231.10 | 200 OK | 2.1 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/image/lg_ft.png IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typePNG image data, 36 x 54, 8-bit/color RGBA, non-interlaced Hash9babe7d8ee8b71fa4e2d182a9e00ecad 65611d3262c80efd253dc48c1cc02b2972cbbce3 5922e6cdf9697c4715890db143a911157ec694af68dd2b63a9b72a25dc498f91
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/image/lg_ft.png HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: image/png
last-modified: Tue, 25 Oct 2022 01:30:56 GMT
vary: Accept-Encoding
etag: W/"63573c50-828"
expires: Mon, 17 Jun 2024 06:50:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/image/re.png | 208.109.231.10 | 200 OK | 4.5 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/image/re.png IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typePNG image data, 277 x 67, 8-bit/color RGBA, non-interlaced Hash020fc8f7ba7a2303202b1ad697f8d5c2 8d67bafe11f462c77b79cf2f143b79bca2b3bb17 c93e75c73d7e0ec67c15f7a18db4a0b0bcb3d22f625f542bb5b16775401c5145
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/image/re.png HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: image/png
last-modified: Tue, 20 Feb 2024 17:15:38 GMT
vary: Accept-Encoding
etag: W/"65d4de3a-11a9"
expires: Mon, 17 Jun 2024 06:50:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/js/jquery-3.5.1.min.js | 208.109.231.10 | 200 OK | 90 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/js/jquery-3.5.1.min.js IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/js/jquery-3.5.1.min.js HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript
last-modified: Tue, 24 Nov 2020 01:18:26 GMT
vary: Accept-Encoding
etag: W/"5fbc5f62-15d84"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/image/logo.svg | 208.109.231.10 | 200 OK | 6.2 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/image/logo.svg IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typeSVG Scalable Vector Graphics image Hash7381cdcbce2523a084f171e8a6e5fcb6 c6949b26a191cbf6eedb5bcae00515ebc7df7bf9 9bd85c27c040d0239a0df93308d4a5de256af7444d4b5d9c8fea7197b61b85c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/image/logo.svg HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:08 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Feb 2024 17:10:16 GMT
vary: Accept-Encoding
etag: W/"65d4dcf8-1813"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/js/respond.min.js | 208.109.231.10 | 200 OK | 4.6 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/js/respond.min.js IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typeJavaScript source, ASCII text, with very long lines (4764), with no line terminators Hash2b9b3340ccd797842deda35476b4cd25 cd939ff9e27eb3368c0377a5241114477d2cc90e 21c9054a90fedfbfb460624671b0f331159d70fbc5fa50b1d76123435ad2dbdf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/js/respond.min.js HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2017 06:50:20 GMT
vary: Accept-Encoding
etag: W/"588aedac-11f1"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/js/bootstrap.min.js | 208.109.231.10 | 200 OK | 62 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/js/bootstrap.min.js IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typeJavaScript source, ASCII text, with very long lines (62126) Hashcabc5d07dec4c381f521bbcd41c009db ca329d086682a4d75b5528d326a66a6d3fffab13 2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/js/bootstrap.min.js HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: application/javascript
last-modified: Mon, 07 Dec 2020 16:50:12 GMT
vary: Accept-Encoding
etag: W/"5fce5d44-f3cb"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Mukta:wght@200;300;400;500;600;700;800&display=swap | 142.250.74.106 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Mukta:wght@200;300;400;500;600;700;800&display=swap IP142.250.74.106:443
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77 ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
File typeASCII text, with very long lines (8052), with no line terminators Hash74a690dee0414795bcec4ae5c2161804 e84debffa5e84e21b3e47512096363374ea091d7 92095850111a745d028f6159aabf161f9ee8b62c8de441965ddc6aad548d9b7e
GET /css2?family=Mukta:wght@200;300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 18 May 2024 06:50:07 GMT
date: Sat, 18 May 2024 06:50:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/css/bootstrap.css | 208.109.231.10 | 200 OK | 193 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/css/bootstrap.css IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
Size193 kB (193015 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/css/bootstrap.css HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: text/css
last-modified: Mon, 07 Dec 2020 16:50:12 GMT
vary: Accept-Encoding
etag: W/"5fce5d44-2f1f7"
expires: Sat, 18 May 2024 18:50:07 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 10.231.109.208.host.secureserver.net/meinswisscom8821/image/le.png | 208.109.231.10 | 200 OK | 99 kB |
URL GET HTTP/210.231.109.208.host.secureserver.net/meinswisscom8821/image/le.png IP208.109.231.10:443 ASN#26496 AS-26496-GO-DADDY-COM-LLC
Requested byhttps://10.231.109.208.host.secureserver.net/meinswisscom8821/ CertificateIssuerLet's Encrypt Subject10.231.109.208.host.secureserver.net Fingerprint95:5D:14:6C:A8:07:BA:0A:DA:B4:EC:A9:CA:05:EE:DC:99:5C:A1:A2 ValidityThu, 16 May 2024 12:11:01 GMT - Wed, 14 Aug 2024 12:11:00 GMT
File typePNG image data, 485 x 618, 8-bit/color RGBA, non-interlaced Hashe4d42741c0b226ade31ee8e351614256 9a101852d626d820ee2211f3458681510d6ce74f 5bf09d7de18b50a0f421b919a5934b532ef1b46b82801294fd6a1b8e1cc5aba5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Swisscom IT Services AG |
GET /meinswisscom8821/image/le.png HTTP/1.1
Host: 10.231.109.208.host.secureserver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://10.231.109.208.host.secureserver.net/meinswisscom8821/
Cookie: PHPSESSID=uqgkahsjgodjkmcf3g5qnnugdu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 18 May 2024 06:50:07 GMT
content-type: image/png
last-modified: Tue, 20 Feb 2024 18:03:04 GMT
vary: Accept-Encoding
etag: W/"65d4e958-182b6"
expires: Mon, 17 Jun 2024 06:50:07 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|