Report - import-auto24.net.pl/

Report Overview

Submitted URL
import-auto24.net.pl/
IP
172.67.132.240
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-27 04:54:55
Access
public
Website Title
Facebook - zaloguj się lub zarejestruj
Final URL
import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
import-auto24.net.pl	unknown	unknown	No data	No data	4.8 kB	72 kB	104.21.5.40
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-25	467 B	6.6 kB	104.17.25.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-26	491 B	27 kB	151.101.1.229
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	477 B	51 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	2.2 kB	170 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.
2024-04-26	medium	import-auto24.net.pl/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn	0 B	2023-03-07	2024-05-08
Pretty URL import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn IP 104.21.5.40 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-08 08:21:40 Times Seen37431061 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (14)

URL IP Response Size

import-auto24.net.pl/img/logo-fb.png

104.21.5.40

200 OK

7.8 kB

URL GET HTTP/3
import-auto24.net.pl/img/logo-fb.png
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
PNG image data, 1400 x 500, 4-bit colormap, non-interlaced
Size
7.8 kB (7819 bytes)
Hash
770903af55b441a80601647cd0899567
cef75ba5c49eaee8e8b84574a96c264704e61004
1ac597dbaa79fd673f48f88e0a3f8f86f322655f7371bab07be3ec043dac8e59

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /img/logo-fb.png HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: image/png
content-length: 7819
last-modified: Sat, 05 Nov 2022 22:21:36 GMT
etag: "1e8b-5ecc09d085c00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3208
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z29vrN1MJNmvaex0e3L3NKRXratg%2BssWP16GHhRIKOppSn4UtG2RWhPA3LTbcQhZwuxznveFRULadxjRtEY1jyKsJpoXJt6I%2FY0xgGOhfxCgCeIwjF3zhlrlcE23JznTGEfjSq6Yvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ac370888411c0a-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.25.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 987155
expires: Thu, 17 Apr 2025 04:54:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xNJeTXlVa8am46bdMx1NKx%2Fv56a7V3hiJyXL%2FxKpqClmPtErU1SOtXJVEY54I8F0Gmdm3dvSXRTvEUHP4Spnah5341BzoiJ9sPJY5oW4y3NveVBFFewm%2FWKN3a97%2FqTkhA%2BHP4%2B%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ac37088b41569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
26 kB (26333 bytes)
Hash
94994c66fec8c3468b269dc0cc242151
ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad
62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab

HTTP Headers

GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://import-auto24.net.pl
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Sat, 27 Apr 2024 04:54:30 GMT
age: 953413
x-served-by: cache-fra-etou8220101-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap

142.250.74.106

200 OK

50 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
50 kB (50170 bytes)
Hash
be71c561bcab6ea26f9fc6e731260e4e
546b3c5275434fe653962a428a9edef3f0bc5428
4f9d2031a1f0164ac8bf34334a42b105000e63655897c95853b2095578ec7957

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Apr 2024 04:54:30 GMT
date: Sat, 27 Apr 2024 04:54:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

import-auto24.net.pl/style.css

104.21.5.40

200 OK

38 kB

URL GET HTTP/3
import-auto24.net.pl/style.css
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
ASCII text, with CRLF line terminators
Size
38 kB (37719 bytes)
Hash
ba2fc3eb5a1e0dc58c4543767abf6900
4c4e43872839902162b97a449ce1daa274b304fd
17c212c146fcd8aab640d40717850c3c579e73151c7318f51e1d0717a68d9c52

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /style.css HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 22:21:27 GMT
etag: W/"309b-5ecc09c7f07c0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=asnRwNpXjeSo2CtueU84EoLpRU821va9AfG3r4wb%2F11KoexMqjbObLV9PtY9Da%2FwKNWFXQYAUR3DrG5IjEKEktzBwCVDAWOUHP%2FBRCcwl%2FMMgljNkKHDUk2zqZWFQUP45Qq7t3DY2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ac3708783d1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://import-auto24.net.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 181170
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://import-auto24.net.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 181170
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35328, version 1.0
Size
35 kB (35328 bytes)
Hash
7670dba29aa2a1560c5d711ea6f6b369
6a2a620d2972f139c804c5a8363c91eb1a7595f6
adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://import-auto24.net.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:12 GMT
expires: Sat, 26 Apr 2025 05:54:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
age: 82818
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35328, version 1.0
Size
35 kB (35328 bytes)
Hash
7670dba29aa2a1560c5d711ea6f6b369
6a2a620d2972f139c804c5a8363c91eb1a7595f6
adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://import-auto24.net.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:12 GMT
expires: Sat, 26 Apr 2025 05:54:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
age: 82818
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

import-auto24.net.pl/apple-touch-icon.png

104.21.5.40

200 OK

9.4 kB

URL GET HTTP/3
import-auto24.net.pl/apple-touch-icon.png
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
9.4 kB (9405 bytes)
Hash
46fdc9fe95ddfe2841c264f5980f0713
0906572b21fbc6e78488f2d896fcb131d9ec3faa
d7b8b2d258301afb544f09e0b8078c8b44f96d65dde6a57ab48d2aba2943306d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: image/png
content-length: 9405
last-modified: Sat, 05 Nov 2022 22:21:28 GMT
etag: "24bd-5ecc09c8e4a00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3208
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BjLV6tyEEIHzqi7njs9M%2F%2BgOMycRsx%2BCmGOOJtsF%2Fw8Q7fMqHoCAcNJxggTBJMNzm5ykoSwxVDKo64BSYoW5untdmr63rf57az%2FE02L28UlB5%2FvXWwdvrMYYMniPO258s7t5EAZa4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ac370b09191c0a-OSL
alt-svc: h3=":443"; ma=86400

import-auto24.net.pl/mobile.css

104.21.5.40

200 OK

1.3 kB

URL GET HTTP/3
import-auto24.net.pl/mobile.css
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
ASCII text, with very long lines (1486), with no line terminators
Size
1.3 kB (1298 bytes)
Hash
be5bd876cc9094b1de5a757611a82580
9a200bffde96bcbfd3260d2ee38f25e2c1403a83
fc8b7a8039dbd0ac4c18c5df82d0cb72e4317f0d068c2c45b20fee941be30158

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /mobile.css HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 22:21:27 GMT
etag: W/"512-5ecc09c7f07c0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7tgWmEbHcDiC%2BipJ7WoypA9WVm69JEvQdCjKdG29uO1F3xQ7PhPzJHR7QbcK%2BmCXnTnaQqIINRWz436NjEzXL%2FX32X%2BG%2BJFUDg6ZZ8ZzbN2j%2FHnc%2Fg9qkeXzGmRLsYOa1D8wxfgb1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ac3708783f1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

import-auto24.net.pl/favicon-16x16.png

104.21.5.40

404 Not Found

282 B

URL GET HTTP/3
import-auto24.net.pl/favicon-16x16.png
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Requested by
https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
HTML document, ASCII text, with no line terminators
Size
282 B (282 bytes)
Hash
e23434b073d8fb2ae88b6297f5f70af9
1ec9f20309d2d137393e2ebe1b5fb707b15447b6
8367e1a4ed924cde70df15ea68dbca3cc933da05eb35c7765ddde321325d6754

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7vti8CcLuGzV6JHpR%2F7zpQdDNv9kmeIZYQax5hAJIOUC9PY1yQOYkuKA8tpUoZbKE3j1Y2nOTgX4DjBbnSd5UhyB92OM4VCdJ6uiGCQYea5Fe9WAfmxDoEGx9x7OCow4wLqOwEZ9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ac370b091a1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

import-auto24.net.pl/

104.21.5.40

302 Found

5.4 kB

URL User Request GET HTTP/2
import-auto24.net.pl/
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type

Size
5.4 kB (5376 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/html; charset=UTF-8
location: ./authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCoK6SayQQqEwgmnOfynaydOe67Ph0c%2Flku5s8HL57tj7QSK5HNmy8YOWXHQYrjn%2FeQ7ZPpLZrB6K1pFTSPEA4Fb4AOepMl0hL%2BQenID%2BIroJzstm%2F%2Fm4wixmwdcAeNOzqWNI%2FtKDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ac3705d80656a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn

104.21.5.40

200 OK

5.4 kB

URL User Request GET HTTP/2
import-auto24.net.pl/authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn
IP
104.21.5.40:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectimport-auto24.net.pl
Fingerprint54:9C:00:9D:0F:3D:2C:3E:B9:0A:D3:E1:7D:6E:DA:A1:94:97:58:E5
ValidityFri, 26 Apr 2024 11:42:28 GMT - Thu, 25 Jul 2024 11:42:27 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (5690), with no line terminators
Size
5.4 kB (5376 bytes)
Hash
dc4a9155d2fdf955395712fbd525bad6
16295087a2298dcdba31260717aa69966e2a7ed8
1419fef7148cc457f62fd79de3de6489d2f79ed4b475d1e68278c6187b156132

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /authorize.php?7psu7x2367v9qkUPRAV8Roydq2xcMuya5p3ewlGAtagvthJSwtKuw7fVkhSaoPpPZI1c0wNwCXoNCr8OnAYuSYikRT8SAHpH7p7qVDdYmAILW8bnMAaoadILH0xe7fXc6XZGG02jAj22485LkyARdu5SGlgZsD2NGqj1wl5woJQnHSOjCccwcVvaj3Wi05mICPOiqhVpawD8gbVAz2y1Flu3A97TfMZ6ngE4deQocGS3A4cj5PvIwcDDqCK3uopn HTTP/1.1
Host: import-auto24.net.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:54:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNQCwWGRqhocavX5yEilhTzeWB6iJ1TEsoq%2FTXqCxCT%2BAREDCgYYAVGPVZnzJt0aqJcFGvJPtRl1%2Fxv8J4U3LHal0k8FHwxccVUeR7mWgiQeTpJHctqItsGFYHZamoIk6Paf5yRoug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ac3706684b56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections