Report - sparkassen-produkte.de/neu-einrichten

Report Overview

Submitted URL
sparkassen-produkte.de/neu-einrichten
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 15:48:24
Access
public
Website Title
Login Online Banking
Final URL
sparkassen-produkte.de/neu-einrichten
Tags
sparkasse financial phishing
urlquery detections
Phishing - Sparkasse

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sparkassen-produkte.de	unknown	unknown	No data	No data	10 kB	3.8 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	sparkassen-produkte.de/neu-einrichten	Sparkasse Bank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	sparkassen-produkte.de/assets/jquery-3.6.0.js	289 kB	2023-03-07	2024-05-02
Pretty URL sparkassen-produkte.de/assets/jquery-3.6.0.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:59 Last Seen2024-05-02 21:05:32 Times Seen5813 Hash 2849239b95f5a9a2aea3f6ed9420bb88 af32f706407ab08f800c5e697cce92466e735847 1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239 Loading...

	sparkassen-produkte.de/assets/jquery-ui.js	529 kB	2023-03-07	2024-05-02
Pretty URL sparkassen-produkte.de/assets/jquery-ui.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:43 Last Seen2024-05-02 16:49:48 Times Seen463 Hash dd5c979b802f985cefb36d3e4239977f 9f0b7689ecae90bc8d0e3ff859d8d600c4b36ee9 e97315234cc1f1c4737d98ea29c0f4d4f06c032dc5943012ae50bc4b10a92276 Loading...

	sparkassen-produkte.de/assets/select2.min.js	73 kB	2023-03-07	2024-05-02
Pretty URL sparkassen-produkte.de/assets/select2.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:49 Last Seen2024-05-02 21:31:10 Times Seen1574 Hash 7c98b05dd4f3d7c693eb34690737f0d8 6de10e74a992fca15e803d910d130f826631cb86 f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0 Loading...

	sparkassen-produkte.de/neu-einrichten	156 B	2023-04-07	2024-04-19
Pretty URL sparkassen-produkte.de/neu-einrichten IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-07 08:52:45 Last Seen2024-04-19 17:48:31 Times Seen69 Hash 32071d995741b8ebc971f25c66b9d78e ebfe0aed0396fc8fd73ce67297bcaff0a6d2f333 bfe2cc4f643b3c92fde604c05d8cc26c2fbeef36c3f73c6373acc1c4e11d9ed3 Loading...

HTTP Transactions (20)

URL IP Response Size

sparkassen-produkte.de/assets/perf-meter.css

188.114.97.1

200 OK

231 B

URL GET HTTP/3
sparkassen-produkte.de/assets/perf-meter.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
ASCII text
Size
231 B (231 bytes)
Hash
fa82ee4a1e809ce2d8b9896046ba3474
9b7546816bdd1b87a63e3c9d953211a3a200a7ac
f008c09173b9230f184fdbcf0fcbf3c4fc8daf1bea6c41b3614f5a3a11e9d376

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/perf-meter.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
content-length: 231
x-accel-version: 0.01
last-modified: Mon, 15 Apr 2024 12:39:55 GMT
etag: "18e-61621eb284186-gzip"
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfOGFz2D9nJFzb%2Bl%2BlK4v6Q8MxQifSsyxZ7eVwoyXlCrxTKmEl0v7Y5QvWw9OzrdC7gW3Pj%2FdmQNsI7vuaZPbyD8kTdXZDm9T0XADqbuaqp8qs2hS0UJX0aV3p5gCmBV91N1P76S8yBZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e0943082b1bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Md.woff

188.114.97.1

200 OK

31 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Md.woff
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
Web Open Font Format, TrueType, length 31016, version 2.2097
Size
31 kB (31016 bytes)
Hash
8938a571b77cfdf397aefa7998a2ee51
e13d092fb00c7b9d939427d5de1ad2f11d7a45be
67284df54731fccb0b3c039cbeaab3474c057c5bc95accad964b13ef86eb1c8d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Md.woff HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: font/woff
content-length: 31016
last-modified: Mon, 15 Apr 2024 12:41:26 GMT
etag: "661d2076-7928"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JvCFwoWFFfdtdjNzE%2FZ%2Fp11MvqOdDjUhFPf%2B5F%2F1aDVZEBXiwO0VRvr5bvkcSnE3vobMYzfnTycOVwcXZhjpVYvZOkdt8MpQJBrBli5l59LatNgP7wibDDmwcKvTLAmgBO10bhAj3lk%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e09476ba81bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Rg.woff

188.114.97.1

200 OK

42 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Rg.woff
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
Web Open Font Format, TrueType, length 41472, version 2.2097
Size
42 kB (41472 bytes)
Hash
1e97dfafb57fb87f40f5cc9941fdab7e
2df97632b25215b1befcd86999b40db1a27c03d0
0e9eb66a1b33ae648ada3c56eb55fa149c4f1b88316b5a7255ca9b076740f451

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Rg.woff HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: font/woff
content-length: 41472
last-modified: Mon, 15 Apr 2024 12:41:26 GMT
etag: "661d2076-a200"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TdoKHghM2RzfUV4nm4OsxbK7NxJ%2BBd0hZusqefiKAfKYyeIh361PTUnb7fygeuNoyvVcov5u5QEsO4ezXb8XxY3tanHn49e8PXqW37t4esLOb85oT6l13bYQ8FpPd8FEsZ%2Fm3GuzdI1u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e09476ba51bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.woff

188.114.97.1

200 OK

37 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.woff
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
Web Open Font Format, TrueType, length 36892, version 2.2621
Size
37 kB (36892 bytes)
Hash
5f90fdbed7642f0f8e97ad31db27a26f
456776c5717c5f966415d7f8175c8b57c233e0b1
e9b9f03e1a75cf22118a30e0503f346e8efb6859276d418e7d1a9a07f73f7002

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Bd.woff HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: font/woff
content-length: 36892
last-modified: Mon, 15 Apr 2024 12:41:26 GMT
etag: "661d2076-901c"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXzGoma4RDbWgMVqZWYWSruWKOFYk%2BtJFlPHe%2FnPFo2jSZny19VsCHLS7twOsmLnRos3zrmayzpDo4HQyz%2FfLlq1XG%2B%2B3%2BvDVFB6NmXL75Wn4Kpo74XYdrKbCEll0ONHM072U7Wuh76N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e09476ba61bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/pictos-if.woff

188.114.97.1

200 OK

143 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/pictos-if.woff
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
Web Open Font Format, TrueType, length 142708, version 0.0
Size
143 kB (142708 bytes)
Hash
84bd22d9a4c9f94cac98d1ddb1fc9143
e9047e2cd62e16e07d8c6952302c9752d548b560
84798913afc7420e1087ff7c0a0c5b39937ddd430b67bf96561ffbaed9e77b14

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/internetfiliale/fonts/pictos-if.woff HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: font/woff
content-length: 142708
last-modified: Mon, 15 Apr 2024 12:41:25 GMT
etag: "661d2075-22d74"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2B9tMbgLhEpGAhwUnbxDJRsvzcOw%2F4y9tBYuUGDy6A6S7UTifQTyoHVnq%2BNhwQG3d82p5yFl1OWY7xIOx6ODZ3uQ0iM3ZhkW%2BicXjcGyMAoTFaL6jpRdwVRRZFstazPKMwHWL2I35LAa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e09477bb11bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/neu-einrichten

188.114.97.1

200 OK

210 kB

URL User Request GET HTTP/2
sparkassen-produkte.de/neu-einrichten
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
gzip compressed data, from Unix
Size
210 kB (209506 bytes)
Hash
f9badde3761ba9a47598190c8e1058af
d3fb1ad58178d07430ac80d9f68a3baee35a3230
c651bc37a58fcd4da4b023fe31688a9c65c11c59deeda616fcd76c6f1f11ea2b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank

HTTP Headers

GET /neu-einrichten HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/html; charset=utf-8
content-location: neu-einrichten.php
vary: negotiate,Accept-Encoding
tcn: choice
x-powered-by: PHP/8.2.18, PleskLin
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4clt1eyA5jjQK%2Bxl5gJ718LrIg3bmff7diYP9KZku66RBuS6WcEMItATbj%2FpSks8gwGeu2xzm3YY6HzSLxEtFCLm%2FWlYGgWG2OFUaDENQJ0A70m07%2B8lsmZIZZzRY6RzE6yrR3Dx6io"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e09409837b50c-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

sparkassen-produkte.de/assets/apple-icon-72x72.png

188.114.97.1

200 OK

933 B

URL GET HTTP/3
sparkassen-produkte.de/assets/apple-icon-72x72.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Size
933 B (933 bytes)
Hash
786672c15975de08dd0abf368397a8fa
455d867dc00c8940c6f460aa240ec1fd318eb97c
33c844bc8b0556367db3f9d9ca10367b10bc95575bcf952fb3f6ebe6ac3907a0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/apple-icon-72x72.png HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: image/png
content-length: 933
x-accel-version: 0.01
last-modified: Mon, 15 Apr 2024 12:39:49 GMT
etag: "3a5-61621ead50100"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prclE9jv7QGVRknjbsLbQlLxLh8gRp%2Bxk8AOpRM2%2F%2BTQ1Qxk7LSqq43MSQ7ncDi0jvGC8CaxF2h10wvIKvszgfvGBeNjNbz7WzjJUaQjGULiuQ5xmFeu%2F35t%2B4iHEQEL3FRLBQnDMuoG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0949ed8a1bfa-OSL
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf

188.114.97.1

404 Not Found

12 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
gzip compressed data, from Unix
Size
12 kB (12163 bytes)
Hash
56d0a74eb938e872011cc0bce5269b6c
710aea6441bebbb4010cfffd292565e0cd6b3312
290ed1b881776a3db7be72126fb4e1a45c1da47f622c9e43d65c63b6ba42e628

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: text/html
last-modified: Mon, 15 Apr 2024 12:29:51 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WTTbckn8eNaJKvGlzx9BOUvlxxHMylUZbp48oYhPNynDFBwKq8o%2FDQBAU2ozezsavORpw272QK%2FToD9iJmjD1pC4AuNRgUHJlnk46nlSE31EYNAgtdlCsFle3CefLxEPciik36Q%2FbNtx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0948ecb41bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Md.ttf

188.114.97.1

404 Not Found

8.5 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/internetfiliale/fonts/Sparkasse_web_Md.ttf
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
gzip compressed data, from Unix
Size
8.5 kB (8498 bytes)
Hash
dc5ae38f2c088b3595cbd434a1913b93
e33124015dc6d8e2841e580d584944252bd9c8db
0020ccd99f696cccd5e7b84d40d8382ca4cd5e8005915a360da7c34c80df9f03

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Md.ttf HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/assets/new.css
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: text/html
last-modified: Mon, 15 Apr 2024 12:29:51 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2BAZ4xLOtb%2BVuIJfhzIjubilEj2ycgtDmQWYbAgHwhNIrw0kggm7Uv3tuQOO%2FKGrRSH1wKowT5ojzNmZzdpTuvAqdAIwCH0FQyrIFC5%2F44lYw4h54nn88wrKRb5y4jRzauhKQyqRSNMl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0948ac8a1bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/select2.min.js

188.114.97.1

200 OK

73 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/select2.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type

Size
73 kB (73163 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/select2.min.js HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 12:39:57 GMT
etag: W/"661d201d-11dcb"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EOOyc2%2F802gk0dBHtjTF5m9gBQOFnBKGO93ixAw%2BveaKw7raQN1c%2FuIPkna1ANiifMAGl50f0bALespBTgRqDTwCJ2fc%2BnYwAvP3hoNzwkGs%2FFLPlcR3ZKqnHb47HpxiBysUrA58njfl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308371bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/favicon.ico

188.114.97.1

200 OK

4.3 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
96cbd1e75e96f76131d6dea46f6c84d7
a93258f218d272f11a8c68999beb901a9676ce37
489457bd142e708c03236d71f4aee3739fa5d7ecf6d6c9db2a61417b0ce0aadd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/favicon.ico HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:59 GMT
content-type: image/vnd.microsoft.icon
last-modified: Mon, 15 Apr 2024 12:39:50 GMT
etag: W/"661d2016-10be"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5LdBLXhG7xQdzDs%2BQQw%2BILgeLyX%2Fa0naI1GKlK2sI6PrUo36A0UwNoUqpcHCsnDNL96VHhdtcwZeD9H%2FpJbKuKcEDpmqWg0k7KS9ojrEzF%2Fhx3KuotjCPmcyx4MnrFlb8kM1VNzQMOz7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0949dd871bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/jquery-3.6.0.js

188.114.97.1

200 OK

289 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/jquery-3.6.0.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
JavaScript source, ASCII text
Size
289 kB (288580 bytes)
Hash
2849239b95f5a9a2aea3f6ed9420bb88
af32f706407ab08f800c5e697cce92466e735847
1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/jquery-3.6.0.js HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 12:39:51 GMT
etag: W/"661d2017-46744"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5uh8rtJUqx9FyP81SfOpl2Wfd3Y%2FBKAZAb%2FarkDjUT7ir520o3FLM5RFF82%2FWG6%2BA9lc0C58xMADhrKYW6CpKTyV562lVSvFYniCGcOCyXZP6nd4HzdntMHb9mUY6Jb1TWlDfjROMTH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308331bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/jquery-ui.js

188.114.97.1

200 OK

529 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/jquery-ui.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
JavaScript source, ASCII text, with very long lines (1004)
Size
529 kB (529062 bytes)
Hash
dd5c979b802f985cefb36d3e4239977f
9f0b7689ecae90bc8d0e3ff859d8d600c4b36ee9
e97315234cc1f1c4737d98ea29c0f4d4f06c032dc5943012ae50bc4b10a92276

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/jquery-ui.js HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/javascript
last-modified: Mon, 15 Apr 2024 12:39:52 GMT
etag: W/"661d2018-812a6"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5SMwbPp5A1RhY%2BrInSewtOb%2BYz8L7GUGw%2B%2FIWhaIgOrmRuxBLSZwdcXvZXEY2ebLcLcYCX6kV30sIeW26jK7FoitAZqxn8J%2Fl7%2F8Glrx69WgrAlX8Ha%2Fxbv7mzyOqv5OyzJrnlQINCV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308341bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/opttan.css

188.114.97.1

200 OK

4.6 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/opttan.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
ASCII text, with very long lines (4934), with no line terminators
Size
4.6 kB (4600 bytes)
Hash
1674420e29f80845f303267e45f1072b
337a9ab45cb57eed0ca734d811d0fa08557b1bd2
6e4497085e5f39b1a652db88cce7a403568e5bcf231eeaf6cab49224f70aa7b0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/opttan.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:54 GMT
etag: W/"661d201a-11f8"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53vQEGJkwAsZAajFTPYxAvi6QmunTaackoX29p38QU%2FcmqZgVKi%2BXf9HGW4WS6Kcax71LGkBfDPlYJRUlMPIJ0cZueonHefI5QGo%2BmVR%2FxhQ7qKQLpjLEoj19ztGWU2Qgwlm4oRkBq4G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308291bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/ospm_custom.css

188.114.97.1

200 OK

18 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/ospm_custom.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type

Size
18 kB (18250 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/ospm_custom.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:54 GMT
etag: W/"661d201a-474a"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6TTmIK4KhC1pcv7bh1uzkbzlROQNhBMCu0Cc55uA%2BNUBxyt0wADxSLsbuF%2FEvgFY%2FNn%2B%2BQUaTDrCEX1Engk83drkGmLOZxTbLmFsRd55keYzfXtPOp%2FrY8odLCHqZchxeP1IA6dvskRp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0943082e1bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/jquery-ui.css

188.114.97.1

200 OK

36 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/jquery-ui.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
ASCII text, with very long lines (2363)
Size
36 kB (36099 bytes)
Hash
b0f4491b037aa1c006ff72013ad22482
3ff07dd41184af4d63a08270d84d553e1a05cb7f
58a6f49e92f7d2fd1246d98c568c2ac7d6be832ddfece67ec9f7ef3332766adf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/jquery-ui.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:51 GMT
etag: W/"661d2017-8d03"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BaKM%2FjE%2BFcc%2BkKXEvJyE6dAq3k7Fhm52yq3c0KJlkJs1P%2FZDcmFpx1EAvCGGaH%2BOAP34a6att5%2BHOaEaAmEukDp4mYnekMCvTNtw68AEtpSWd2hYezCQRtDZVpPBoOeQltzxhG%2B%2BS3hj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0943082f1bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/logo_ini.svg

188.114.97.1

200 OK

23 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/logo_ini.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
SVG Scalable Vector Graphics image
Size
23 kB (22718 bytes)
Hash
b2f1fb1e28d6945a19f6102e287d8c10
e43846c4e0b5c36ffed6ad2810e6bad4f98423b5
2ee73fd1898343f28de6ed91576db74c150e7f91fd9f6767ae1c52a503a4728a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/logo_ini.svg HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Apr 2024 12:39:53 GMT
etag: W/"661d2019-58be"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fena3r5AipmWCl2M9d6uHJUA%2BVoMxdT9m0TN4oJpzJFkY0iOzlcWHFg9ER4lSfv61tdiuionump1j31ZHAlrz4ttn3s5kLDkjW2IZwkG77SV47UnGlzd9qc3HWdPDEQDORaeswT6XVR8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308381bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/new.css

188.114.97.1

200 OK

1.8 MB

URL GET HTTP/3
sparkassen-produkte.de/assets/new.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type

Size
1.8 MB (1821773 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/new.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:54 GMT
etag: W/"661d201a-1bcc4d"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x10yU3ppBP3RJShbCLtT%2Fg5A4wB3NKABFKsjtbRosrPhYkQrg%2Bojv96DELK6I2xbfwBDO0GqPnftuz2BqTtnzavFLSb%2BLNKzolChgZ15k4llNfeGYmJP03elXjLplVndEVjr1Otscc%2Fz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0942f8271bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/opsm.css

188.114.97.1

200 OK

516 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/opsm.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type

Size
516 kB (516396 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/opsm.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:54 GMT
etag: W/"661d201a-7e12c"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqC3yyk52SwFTFHsIi%2BH%2Bn2lLa2HGjVw%2BrNZxPt716UBPJ2QTollcmdtIUaF0ky8KoZWdm6%2BnAvcY0JUpAOYpqYxCDdQur1kQZe%2BUgHSsLknxutc9jWKFKcI1t08Z6SvGV1TUn83Ma%2FP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e0942f8281bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkassen-produkte.de/assets/select2.min.css

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
sparkassen-produkte.de/assets/select2.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkassen-produkte.de/neu-einrichten
Certificate
IssuerGoogle Trust Services LLC
Subjectsparkassen-produkte.de
FingerprintB4:F4:4B:D0:B1:D3:8A:8D:15:DE:2C:E0:33:07:79:57:43:0A:BF:38
ValiditySun, 14 Apr 2024 09:02:45 GMT - Sat, 13 Jul 2024 09:02:44 GMT

File type
ASCII text, with very long lines (16263)
Size
16 kB (16264 bytes)
Hash
e71c39430469a3eea74514a2b48f6536
913f9f7b9535aec790ca3ce9d6e35acfaf369993
cda4a81c187015d95ed2c71f1841540b08203cdec5fa2a7d5d1825a3c2166f8c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Sparkasse

HTTP Headers

GET /assets/select2.min.css HTTP/1.1
Host: sparkassen-produkte.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkassen-produkte.de/neu-einrichten
Cookie: PHPSESSID=8vp94g320rind23t3p38v7p1c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:47:58 GMT
content-type: text/css
last-modified: Mon, 15 Apr 2024 12:39:57 GMT
etag: W/"661d201d-3f88"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2BrXj9ylDT%2F5bHbHV0TTqEzdR8mFPUzckik57oHx5LmlL3nl%2F2EHC6AdYMLSGq7Np7OH2i2ivxGU1%2FFMEQ0STWYn41%2BvyAR9gTpMT4fu2lzst24EdW67%2B99GlkIhu%2FWkTG0mQqfk7aGl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e094308361bfa-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate