Report - ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/

Report Overview

Submitted URL
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
IP
147.78.103.64
ASN
#51396 Pfcloud UG
Submitted
2024-04-28 13:43:51
Access
public
Website Title
Société Générale | Connexion
Final URL
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Tags
societe_generale financial phishing suspicious
urlquery detections
Phishing - Societe Generale
Suspicious - Anti-debugging code

Detections

urlquery
42
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ssl-auth.info	unknown	unknown	No data	No data	9.6 kB	159 kB	147.78.103.64
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-27	465 B	12 kB	104.17.24.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-27	440 B	17 kB	151.101.129.229
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-28	1.6 kB	47 kB	216.58.207.227
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-27	452 B	160 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/main.js	6.5 kB	2023-03-07	2024-04-29
Pretty URL ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/main.js IP 147.78.103.64 ASN #51396 Pfcloud UG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:53:21 Last Seen2024-04-29 08:22:19 Times Seen1729 Hash 65e61311ea424b3cc146e1ec8e0626ae 58ddd35c21e1e2f080cd25059be6e28fa8abb9c0 62059840936e01bf0f43ed99e4df32f5653d11db4e8c31aa9dafc80906affe6c Loading...

	cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js	62 kB	2023-03-07	2024-05-06
Pretty URL cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js IP 151.101.129.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-06 19:39:14 Times Seen3332 Hash cdb34f3de7cfb2d32a2ed08d98e7382c 9b04f4f986048aa09ebeeb459f17e274bbc3cde6 6965c967fe2474e34f024a08618c84e9f995c3482a3c46e793b9eca4b00d82e2 Loading...

	cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js	41 kB	2023-03-07	2024-05-13
Pretty URL cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-13 08:05:26 Times Seen7571 Hash f3b8ce97ff6ce324da6232da353adf40 2a3daabc70232c6350ab48d32605dc4a6ac1f1fa 2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b Loading...

	ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/common/log.js	886 B	2023-03-07	2024-04-29
Pretty URL ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/common/log.js IP 147.78.103.64 ASN #51396 Pfcloud UG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:53:21 Last Seen2024-04-29 08:22:19 Times Seen1763 Hash c0362ff2dddc218b22d44e4892b717f0 fb8d69a1385dc5b1eb8be6e0e0a852722418e9b7 f2484ecad3843167225d42944380ec56939ed2662c3304923a70c352c828a5bf Loading...

	ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery.js	84 kB	2023-03-07	2024-05-10
Pretty URL ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery.js IP 147.78.103.64 ASN #51396 Pfcloud UG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:39:52 Last Seen2024-05-10 08:40:28 Times Seen1681 Hash 8b0bc30d9bdfc389526361019dec7736 036d737fb63a019d8a1c434f2b4545b22b6fd45f e176dc8d5da626a295961c495ff00c67ac6dd9295677410f6e211537dfb3a1e0 Loading...

	ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery-ui.js	240 kB	2023-03-07	2024-04-29
Pretty URL ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery-ui.js IP 147.78.103.64 ASN #51396 Pfcloud UG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:00:30 Last Seen2024-04-29 08:22:19 Times Seen1669 Hash d6e605aa6b2d85fcd95a1e8a44f08301 a4f5f14b57bb27207f0ad780f9e615257f2f9e32 b99cb3f5a0978988ae8d179c872a10ef306036cf74189a0cd6f7821e26b1df3c Loading...

HTTP Transactions (25)

URL IP Response Size

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/

147.78.103.64

200 OK

2.4 kB

URL User Request GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.4 kB (2353 bytes)
Hash
7beb2c7f9a0289b1eada6753d4372ff8
cca50b31da922b8149a1c0c50f216625eb89cb11
72324f22c73d01771d888e72255d51609314e36c307c91fa1f17e8b38fab2b7b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/ HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: text/html; charset=UTF-8
content-length: 2353
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/8.2.18, PleskLin
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js

104.17.24.14

200 OK

10 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (40808), with no line terminators
Size
10 kB (10494 bytes)
Hash
f3b8ce97ff6ce324da6232da353adf40
2a3daabc70232c6350ab48d32605dc4a6ac1f1fa
2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b

HTTP Headers

GET /ajax/libs/sweetalert/2.1.2/sweetalert.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ssl-auth.info
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 10494
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ff8-9f68"
last-modified: Mon, 04 May 2020 16:16:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1108473
expires: Fri, 18 Apr 2025 13:43:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=03ihsXPZRQ2QMYCvquuEItaLjA6W7lhlE8d0F7eu6BZPtqbmgdTScu1qd8YVxC%2BZ3dauCz%2FwjvivZk54yEelsydPJr27viQIz3Ueb1QizJhTrw9h6xDes3NQ0H%2BHHwSORydFYeMq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87b77b3109f256ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora.png

147.78.103.64

200 OK

975 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 50 x 52, 8-bit/color RGBA, non-interlaced
Size
975 B (975 bytes)
Hash
f76996087a2582f228f56290a1692239
e0e04a46815bada84eb63bfb6fa215dc21d585f1
5735d2ceaefd9e4a326e6f015178feee4bb2b80c9d048a1857f18f5640c6b987

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 975
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "3cf-6172030b46373"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora1.png

147.78.103.64

200 OK

1.1 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora1.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 63 x 50, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1103 bytes)
Hash
94d565c17eb506f5c7cb7269f143de52
87ae8ffb409dae4060cce85b6109d9c037c3277c
2f17ed036cfd90e3be3a94066352e4fd68b508453d6bb79a3df839d54078e6f7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora1.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 1103
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-44f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora2.png

147.78.103.64

200 OK

438 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora2.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 45 x 37, 8-bit/color RGBA, non-interlaced
Size
438 B (438 bytes)
Hash
79291e8ef7ed55380de1d1b9bc0920c2
2d3b5bbf86dcef67b91ca1e87d4ee9617b3346c7
97e1d35262f8d1df88a0d036b7058a8d7cd60baa0218de601b617ad3441576af

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora2.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 438
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "1b6-6172030b46373"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js

151.101.129.229

200 OK

16 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (34666)
Size
16 kB (15789 bytes)
Hash
cdb34f3de7cfb2d32a2ed08d98e7382c
9b04f4f986048aa09ebeeb459f17e274bbc3cde6
6965c967fe2474e34f024a08618c84e9f995c3482a3c46e793b9eca4b00d82e2

HTTP Headers

GET /npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 7.26.11
x-jsd-version-type: version
etag: W/"f0e9-mwT0+YYEiqCevutFnxfidLvDzeY"
content-encoding: br
accept-ranges: bytes
age: 979143
date: Sun, 28 Apr 2024 13:43:25 GMT
x-served-by: cache-fra-eddf8230098-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15789
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo-sg-seul.png

147.78.103.64

200 OK

3.3 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo-sg-seul.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 245 x 48, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3264 bytes)
Hash
ce152793719208ddec25710c54f2687e
395293765d358215c40a66056eab8b3d250bfdaf
1095ef0c8401943aebdcd816e921c30b770b1c232acf5df2e40b70300efde552

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo-sg-seul.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 3264
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-cc0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/common/log.js

147.78.103.64

200 OK

449 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/common/log.js
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
ASCII text, with CRLF line terminators
Size
449 B (449 bytes)
Hash
c0362ff2dddc218b22d44e4892b717f0
fb8d69a1385dc5b1eb8be6e0e0a852722418e9b7
f2484ecad3843167225d42944380ec56939ed2662c3304923a70c352c828a5bf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/common/log.js HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: application/javascript
content-length: 449
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "376-6172030b44433-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk_right.png

147.78.103.64

200 OK

2.9 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk_right.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 195 x 82, 8-bit/color RGBA, non-interlaced
Size
2.9 kB (2866 bytes)
Hash
de732dd1a1fd527dd4e02aee6c0085d6
54bc6ef40a0995f2ae66737474dbbccef75eb961
efa4e07d133048f4c2341b63a74e7cd50a29146710bf682c9bdabcd173285278

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk_right.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 2866
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-b32"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/main.js

147.78.103.64

200 OK

4.3 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/main.js
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
4.3 kB (4289 bytes)
Hash
65e61311ea424b3cc146e1ec8e0626ae
58ddd35c21e1e2f080cd25059be6e28fa8abb9c0
62059840936e01bf0f43ed99e4df32f5653d11db4e8c31aa9dafc80906affe6c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale
urlquery	suspicious	Suspicious - Anti-debugging code

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/js/main.js HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: application/javascript
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-1975"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery-ui.js

147.78.103.64

200 OK

60 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery-ui.js
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
JavaScript source, ASCII text, with very long lines (32157), with CRLF line terminators
Size
60 kB (59760 bytes)
Hash
d6e605aa6b2d85fcd95a1e8a44f08301
a4f5f14b57bb27207f0ad780f9e615257f2f9e32
b99cb3f5a0978988ae8d179c872a10ef306036cf74189a0cd6f7821e26b1df3c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery-ui.js HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: application/javascript
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-3a7d8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora3.png

147.78.103.64

200 OK

1.5 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora3.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 200 x 47, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1524 bytes)
Hash
9b41df62a6b07f8ae97f5ca5fecc76b2
074a7ffe3dfc3eeb4f8b2b32c1908f74aedcf9a8
28998adacc6d83affb12d973b7500a5ec9e7e96a5eb5f9ba9c521a8ed0cb1539

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/icora3.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 1524
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-5f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/del.png

147.78.103.64

200 OK

394 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/del.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 29 x 30, 8-bit/color RGBA, non-interlaced
Size
394 B (394 bytes)
Hash
e35e3deee20eb343773c7ab354aae6f8
288fdfc29eae862f071e9d5b3a3ad5c8921cba71
0cacaf469800b12d9f3ae16c58e13836c70e4e4a0ef87501f6f3458127da4057

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/del.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 394
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "18a-6172030b4a1f3"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery.js

147.78.103.64

200 OK

32 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery.js
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators
Size
32 kB (32422 bytes)
Hash
8b0bc30d9bdfc389526361019dec7736
036d737fb63a019d8a1c434f2b4545b22b6fd45f
e176dc8d5da626a295961c495ff00c67ac6dd9295677410f6e211537dfb3a1e0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/js/jquery.js HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: application/javascript
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-14917"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14880, version 1.0
Size
15 kB (14880 bytes)
Hash
819af3d3abdc9f135d49b80a91e2ff4c
0fd9f29faa386a9c8de328f799d2698948ed3d25
1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc

HTTP Headers

GET /s/opensans/v17/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ssl-auth.info
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14880
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:03:01 GMT
expires: Sat, 26 Apr 2025 06:03:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Jul 2019 19:31:11 GMT
content-type: font/woff2
age: 200424
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15056, version 1.0
Size
15 kB (15056 bytes)
Hash
0edb76284a7a0f8db4665b560ee2b48f
02496387a5f7bf7b79df52c7b76ece4ebc7a0710
74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b

HTTP Headers

GET /s/opensans/v17/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ssl-auth.info
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:39 GMT
expires: Sat, 26 Apr 2025 05:54:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Jul 2019 19:30:57 GMT
content-type: font/woff2
age: 200926
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2

216.58.207.227

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Size
14 kB (14380 bytes)
Hash
33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52

HTTP Headers

GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ssl-auth.info
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14380
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:59 GMT
expires: Sat, 26 Apr 2025 06:02:59 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Jul 2019 19:30:45 GMT
content-type: font/woff2
age: 200426
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/index.ico

147.78.103.64

200 OK

318 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/index.ico
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 16 colors
Size
318 B (318 bytes)
Hash
ca10c09aeaf43460d3760f50c608eb51
f2ed2a4fe0e1eadb7dd28444ea6b7a04abf0d38e
daf58b06a09d467436ee5fd10eefbeadac3cf6ecaef1eca1884ef8330f561642

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/index.ico HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:26 GMT
content-type: image/vnd.microsoft.icon
content-length: 318
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "13e-6172030b46373"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/sov.png

147.78.103.64

200 OK

3.8 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/sov.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 242 x 41, 8-bit/color RGBA, non-interlaced
Size
3.8 kB (3774 bytes)
Hash
c7f51f466f01e234d8c45f39086a9d5c
20d936a93cdb8776f9e2b8c3d46fc2e074cc2668
443156d6d3e81b6248173675b3612b2d66a57d9e4f2b508016931ac8d099c10d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/sov.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 3774
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-ebe"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/css2.css

147.78.103.64

200 OK

7.9 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/css2.css
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
ASCII text, with very long lines (8048), with no line terminators
Size
7.9 kB (7856 bytes)
Hash
f9ac19300c64445a2327bb7f8eda9aa4
9445887243212bad2352e0ca1da96897328a8e0a
a1dc9fb1271fdec87377e33971b287d249a6db1f4ca3d402c531bcdf1332dfc6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/css/css2.css HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: text/css
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-1eb0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css

147.78.103.64

200 OK

22 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
ASCII text, with CRLF line terminators
Size
22 kB (22226 bytes)
Hash
47276a1a2496727f6283b67f0e2602ce
cb20b841d660c26770d59f13f551cd8d01744d76
5683fe7820897d83d95b3451a04ea3dd5986a717dff059889fa0d05e91836a85

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: text/css
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-56d2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css

104.18.11.207

200 OK

160 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65324)
Size
160 kB (159515 bytes)
Hash
7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6

HTTP Headers

GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7cc40c199d128af6b01e74a28c5900b0"
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 10/31/2023 19:00:00
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bae8a1587e900a782629330c8ed740ae
cdn-cache: HIT
cf-cache-status: HIT
age: 13507451
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87b77b3138b256cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk.png

147.78.103.64

200 OK

3.1 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 211 x 84, 8-bit/color RGBA, non-interlaced
Size
3.1 kB (3065 bytes)
Hash
acee6e3c89be65ad1e6b7883c805f984
370e5b07648d226a8d3115bb5763a2dc101fe8fd
2f1163ec7e6e951ca4a06d722ff2e50827a3788a6a36d5fa2af1f284c668c1a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/logo_desk.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 3065
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "662dca13-bf9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/nm.css

147.78.103.64

200 OK

7.2 kB

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/nm.css
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
ASCII text, with very long lines (7888), with no line terminators
Size
7.2 kB (7162 bytes)
Hash
22e27a01b5873ca1d0c718b6565e91be
759ee17e30c7b41ff2170615a07a113985c69356
70d77cbd0bf4decdb788df1c727eba0c9e351699e1fa2832a3c7370fc6389353

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/css/nm.css HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: text/css
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: W/"662dca13-1bfa"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/ico_text.png

147.78.103.64

200 OK

256 B

URL GET HTTP/2
ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/img/ico_text.png
IP
147.78.103.64:443
ASN
#51396 Pfcloud UG

Requested by
https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/
Certificate
IssuerLet's Encrypt
Subjectssl-auth.info
Fingerprint70:E9:7C:87:DE:51:6E:79:0B:F2:2F:3D:7E:3E:9B:34:B5:CD:3B:3F
ValiditySat, 27 Apr 2024 18:48:50 GMT - Fri, 26 Jul 2024 18:48:49 GMT

File type
PNG image data, 15 x 18, 8-bit/color RGBA, non-interlaced
Size
256 B (256 bytes)
Hash
81da99c17940b159fae9b148edfcf184
fc974800ce7105761ed8bc6639cfa8a27f7d9280
1da576a49156cff58c8ecd323c7c85da4a4ebff143ba1946509a88611547093b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Societe Generale

HTTP Headers

GET /0df1a20500cd687e7c38cfa7e0bf211d/layout/img/ico_text.png HTTP/1.1
Host: ssl-auth.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ssl-auth.info/0df1a20500cd687e7c38cfa7e0bf211d/layout/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 28 Apr 2024 13:43:25 GMT
content-type: image/png
content-length: 256
x-accel-version: 0.01
last-modified: Sun, 28 Apr 2024 04:01:23 GMT
etag: "100-6172030b46373"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (25)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP