Report - sparkasse-aktualisieren.de/jetzt-verbinden

Report Overview

Submitted URL
sparkasse-aktualisieren.de/jetzt-verbinden
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 15:58:49
Access
public
Website Title
Login Online Banking
Final URL
sparkasse-aktualisieren.de/jetzt-verbinden
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
38

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sparkasse-aktualisieren.de	unknown	unknown	2024-03-18	2024-03-23	9.0 kB	1.5 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	sparkasse-aktualisieren.de/jetzt-verbinden	Sparkasse Bank

PhishTank

Scan Date	Severity	Indicator	Alert
2024-03-29	medium	sparkasse-aktualisieren.de/jetzt-verbinden	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed
2024-04-16	medium	sparkasse-aktualisieren.de	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	sparkasse-aktualisieren.de/assets/jquery-3.6.0.js	289 kB	2023-03-07	2024-04-29
Pretty URL sparkasse-aktualisieren.de/assets/jquery-3.6.0.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:59 Last Seen2024-04-29 18:50:28 Times Seen5792 Hash 2849239b95f5a9a2aea3f6ed9420bb88 af32f706407ab08f800c5e697cce92466e735847 1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239 Loading...

	sparkasse-aktualisieren.de/assets/jquery-ui.js	529 kB	2023-03-07	2024-04-23
Pretty URL sparkasse-aktualisieren.de/assets/jquery-ui.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:43 Last Seen2024-04-23 18:30:30 Times Seen455 Hash dd5c979b802f985cefb36d3e4239977f 9f0b7689ecae90bc8d0e3ff859d8d600c4b36ee9 e97315234cc1f1c4737d98ea29c0f4d4f06c032dc5943012ae50bc4b10a92276 Loading...

	sparkasse-aktualisieren.de/assets/select2.min.js	73 kB	2023-03-07	2024-04-28
Pretty URL sparkasse-aktualisieren.de/assets/select2.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:49 Last Seen2024-04-28 23:14:51 Times Seen1566 Hash 7c98b05dd4f3d7c693eb34690737f0d8 6de10e74a992fca15e803d910d130f826631cb86 f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0 Loading...

HTTP Transactions (17)

URL IP Response Size

sparkasse-aktualisieren.de/assets/perf-meter.css

188.114.96.1

200 OK

37 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/perf-meter.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
gzip compressed data, from Unix
Size
37 kB (37132 bytes)
Hash
4a1184a864f0d957a29abc4501f7d370
446c72f2ff4ee298f7349b107fb4743879ef71fd
f06efdb16f32d0301f339151b0ba5d3cbaa934d55c09e0ae9497bd3b96ec5ea3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/perf-meter.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:32 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdfOnYAos89TBZE7VqBiebEiDqlr0FJ62U919CBg%2FEZGUedBHcsPxK%2FOBYLfu9dsc3Mg5m%2BmJHQXubTZ0eZQ9Xt3VT3a05pVs2kM3SbLb2BWZ3m0UKlsNBCV9B%2BtxhiOfz8SuEherIrR%2BjvL%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560643e9156c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/new.css

188.114.96.1

200 OK

232 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/new.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
gzip compressed data, from Unix
Size
232 kB (231569 bytes)
Hash
fb1dc4430497f05419208675b8a9f4d8
11d5740e32a1bf5d22f48b8c8071afb0ec86571a
8ca32925af09dfcfad78e99523e25e4fab1a835f864aa2ee79d78a9f342d389d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/new.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:29 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLdGErO1CvuqVJtJTOm%2BI%2FadnKJUfCqZcdETocag4VsRyUWbeedHMoejLv1mvha31SPBHfvJqi7gNy4PLkHyKKNzMnHZKdg2enseFFYJEssd%2BoRpfdf6cjnIooN0mMlZ9xu3MYTWQeydCZGabw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560642e8a56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/jquery-ui.js

188.114.96.1

200 OK

127 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/jquery-ui.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
gzip compressed data, from Unix
Size
127 kB (127344 bytes)
Hash
d7f5c2be3d76eb0b848c1907d30591be
c6b2b0c891ca9660cd3e542fa80e813a80e6a78d
889a2b3307809b50b513080ca079a10f45f8f7f25491cc4cf486e4e63f4040b3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/jquery-ui.js HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:22 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVxulRrZdhM5kxje3i3ARWiodkyFbohVbOiO1s%2FJ%2FXLNve%2BBHlkHIhggErmR5%2BfbLeLa%2Fz2oxZH52%2FrBgTeEYC4498BTmmRkZkLl64dv6gp67t2HrP%2F4fl%2Fy5LEnvUoUp49nnU9GXgPFWXRu7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560644eaa56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/select2.min.js

188.114.96.1

200 OK

73 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/select2.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type

Size
73 kB (73163 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/select2.min.js HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:40 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4IbaiM6P9Oyf0HkaSuP%2FwZpXSfHVBcFeUWhypnsrG4QxQQ3Gp7spsO5DzAf7bMpgKCACovMPPvS1QOiwd0nQH63bVhlHkN1jCmbcCbNyeJ1RT4FdzdEr5YQRTxACjon6kfBl%2FR3vCD%2B0B7Krfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560644eaf56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf

188.114.96.1

404 Not Found

1.2 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
HTML document, ASCII text, with very long lines (1197), with no line terminators
Size
1.2 kB (1163 bytes)
Hash
b4c0e8141ce519c7550545a327f32e5a
1882e285d00ca27f13b971e3b19bfa37927061bf
73789075a869e14fc8adf25c65f7223c1dbb7ec30c67797f797cf569bf43d82f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Bd.ttf HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/assets/new.css
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 15:58:24 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IZceUDHoqomI8LiHDZ1XYQplIzoRR7VByHAdtT6qZovIsDTAapuZeN72ogWMZwDwWHnr0KC2TMlB4ZZ3ch2xTbuVZydWkSmG4O6izrAuFczCqe8PvgUwnapIg%2Frb4KIRg%2ByIbDSOBzUm4kTBIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87556068ae6b56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/ospm_custom.css

188.114.96.1

200 OK

18 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/ospm_custom.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type

Size
18 kB (18250 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/ospm_custom.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:31 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DU%2BgkAxqg%2FYQZfJWWCyxWT2pyA1el6mUEN41qnkiZis7vkiM7FcF8j1ry3BfHINQSpij9FWebRMv1FlscuPIGZ1%2BNk8Pq04iYhAGIl60S9LYeKtAeJQMgTpFz97rmf1ZAOSiX8ZyJo0oBz3LLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560643e9356c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/jquery-ui.css

188.114.96.1

200 OK

36 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/jquery-ui.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
ASCII text, with very long lines (2363)
Size
36 kB (36099 bytes)
Hash
b0f4491b037aa1c006ff72013ad22482
3ff07dd41184af4d63a08270d84d553e1a05cb7f
58a6f49e92f7d2fd1246d98c568c2ac7d6be832ddfece67ec9f7ef3332766adf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/jquery-ui.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:21 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rri2jr4Ex4mMkRhFHuSowWfZPnwPh1lvaZVFnEj8E0XtF4bG8%2FUq%2BUGU%2BsV%2B0peVH0a%2FueoB4zUBXFP3KZfbmeWmtuBUNTbyfTb4hUAkuTDId766mAXMIyujlpFOfMvq6C%2BNv%2BNRLERevTezhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560643ea556c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/jquery-3.6.0.js

188.114.96.1

200 OK

289 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/jquery-3.6.0.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
JavaScript source, ASCII text
Size
289 kB (288580 bytes)
Hash
2849239b95f5a9a2aea3f6ed9420bb88
af32f706407ab08f800c5e697cce92466e735847
1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/jquery-3.6.0.js HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4QLiPfUzsZnAFwqQI7otmS32ltHX1q%2FVWshPivqQ2zEg4ppoIp2b%2BmZyIDmRBTDwwuJGd9Bq90jYrNoPbFffviTfLZ56j6SalWKq%2BfjvnS7oL9gdZC3LL3ngHL4hKDE8o3SSBAr8xrv7zuMAiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560643ea856c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/select2.min.css

188.114.96.1

200 OK

16 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/select2.min.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
ASCII text, with very long lines (16263)
Size
16 kB (16264 bytes)
Hash
e71c39430469a3eea74514a2b48f6536
913f9f7b9535aec790ca3ce9d6e35acfaf369993
cda4a81c187015d95ed2c71f1841540b08203cdec5fa2a7d5d1825a3c2166f8c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/select2.min.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:40 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bQ8%2FvtB2OYtCADGNH5JLdYo4mg797CDY15O8ayQAkGjnpYH8APX3H5dCDWqaXAfy5A4PQgKqJZS6%2F0nzSgsYRwV%2F7eJChj5GxMRd7hjjx%2BghwL%2BHaEiZKNJxTmB8Yc0BrCJscdsD9h5rHGERVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560644ead56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.woff

188.114.96.1

200 OK

37 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Bd.woff
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
Web Open Font Format, TrueType, length 36892, version 2.2621
Size
37 kB (36892 bytes)
Hash
5f90fdbed7642f0f8e97ad31db27a26f
456776c5717c5f966415d7f8175c8b57c233e0b1
e9b9f03e1a75cf22118a30e0503f346e8efb6859276d418e7d1a9a07f73f7002

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Bd.woff HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/assets/new.css
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:24 GMT
content-type: font/woff
content-length: 36892
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:24 GMT
last-modified: Wed, 11 Oct 2023 15:58:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wEo8RzqQ0wu5Jk0wAtXz%2FG330oG582QFk81yEvfAbNPdezHJMauAeiXdaqZDvHQAUqaisCFCOMcZPkEoEStlKLEziPEVewgt7FEoTQdkqgUXqe7PfSEStx%2BpeLUHSBVPBpcPaq%2FwowR7FrNrTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875560679c3c56c0-OSL
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/opsm.css

188.114.96.1

200 OK

516 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/opsm.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type

Size
516 kB (516396 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/opsm.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:29 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KotjKpzX1l4P6sOsLePTguUGwXfoBfNN1vIfOAd6AfgCGlyvTKeMyLIiQqkvkPrjZBLg%2B9UU1PO58AE2CidJ26JkQaMtl3UwWJdtYI2RvRk0ZqPVW1SSD56mXXz9KqCo5ggnPP5LQW3%2BexVc6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560642e8d56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Rg.woff

188.114.96.1

200 OK

42 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/internetfiliale/fonts/Sparkasse_web_Rg.woff
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
Web Open Font Format, TrueType, length 41472, version 2.2097
Size
42 kB (41472 bytes)
Hash
1e97dfafb57fb87f40f5cc9941fdab7e
2df97632b25215b1befcd86999b40db1a27c03d0
0e9eb66a1b33ae648ada3c56eb55fa149c4f1b88316b5a7255ca9b076740f451

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/internetfiliale/fonts/Sparkasse_web_Rg.woff HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/assets/new.css
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:24 GMT
content-type: font/woff
content-length: 41472
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:58:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=17kihHjtJEONkX6gaEDShq%2BUYjArmw1F5bx0IkogZu0wZhl1L863GzXvfX8smOV5B4bu7WTiSF0mAWuOhf7gC5XEfDXakLj9y4NbrZkgpM7reAco%2BEgoPEA0Hk1CAv0KC13CbqRoTx7fiRdTbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875560679c3856c0-OSL
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/apple-icon-72x72.png

188.114.96.1

200 OK

933 B

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/apple-icon-72x72.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Size
933 B (933 bytes)
Hash
786672c15975de08dd0abf368397a8fa
455d867dc00c8940c6f460aa240ec1fd318eb97c
33c844bc8b0556367db3f9d9ca10367b10bc95575bcf952fb3f6ebe6ac3907a0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/apple-icon-72x72.png HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:24 GMT
content-type: image/png
content-length: 933
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:24 GMT
last-modified: Wed, 11 Oct 2023 15:57:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ivo%2BF3QEBBXkbGZe7T5bEHteIYmAntjswqZzskaDTJ%2BAxkEo7xvIALB3TbZuRxssT%2FO518BL2RPmLPjjbAL7wmPuA%2BhPtoe5qWy9FXdIePxlsoFZpytDjWPaftLrYFBnABicuqHzPTHzxgklbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875560694f9256c0-OSL
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/logo_ini.svg

188.114.96.1

200 OK

23 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/logo_ini.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
SVG Scalable Vector Graphics image
Size
23 kB (22718 bytes)
Hash
b2f1fb1e28d6945a19f6102e287d8c10
e43846c4e0b5c36ffed6ad2810e6bad4f98423b5
2ee73fd1898343f28de6ed91576db74c150e7f91fd9f6767ae1c52a503a4728a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/logo_ini.svg HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:02:14 GMT
last-modified: Wed, 11 Oct 2023 15:57:23 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 3369
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRpu4F%2B2IQAWHbXCJbAA2EMYdeLD%2F7NH5i%2Bh2yKfJo7EhUbJ8wzMK8nfxnftKC9IB7N71OP8KB2Jp64IdqqkvJYINOOyXkLG7ohYRXZ573hSvSgEThZESwNKd%2BWR9MQXKJEiM3qIpCdUh%2Bd2oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560644eb456c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/opttan.css

188.114.96.1

200 OK

4.6 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/opttan.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
ASCII text, with very long lines (4934), with no line terminators
Size
4.6 kB (4600 bytes)
Hash
1674420e29f80845f303267e45f1072b
337a9ab45cb57eed0ca734d811d0fa08557b1bd2
6e4497085e5f39b1a652db88cce7a403568e5bcf231eeaf6cab49224f70aa7b0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/opttan.css HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:58:23 GMT
last-modified: Wed, 11 Oct 2023 15:57:29 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rOn6jhH1hfsQ1L8gg0x07lC6rnzBjIYv%2BUnA7yQKfIXSjf87O0CWe4P%2BEVw1DtuE1Xunq2uvh7HA3Y%2Fa1%2FcRk7R4kUg3kti4iK3bRxbrUDUHDL4x6y%2FNO3jCS7gY9zPnGg4pUfFt%2BsVG5aXSbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560643e8e56c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/assets/favicon.ico

188.114.96.1

200 OK

4.3 kB

URL GET HTTP/3
sparkasse-aktualisieren.de/assets/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sparkasse-aktualisieren.de/jetzt-verbinden
Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
96cbd1e75e96f76131d6dea46f6c84d7
a93258f218d272f11a8c68999beb901a9676ce37
489457bd142e708c03236d71f4aee3739fa5d7ecf6d6c9db2a61417b0ce0aadd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/favicon.ico HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sparkasse-aktualisieren.de/jetzt-verbinden
Cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 15:58:24 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Tue, 23 Apr 2024 15:02:14 GMT
last-modified: Wed, 11 Oct 2023 15:57:19 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 3370
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9277xcprSiwOx7H21XcDQrdqOME5AzrvVoxH89w2NTS1B0pe3z66%2BWh%2FmMC1vptQR8WIWElzp3hB7lP4kWaii97sMXOqE4E%2BQq6Lqy%2F2%2FSJV0GldsV4Txmr0%2B8h0uVDVyBP0Ew3paQB77OKb6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875560694f9056c0-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400

sparkasse-aktualisieren.de/jetzt-verbinden

188.114.96.1

200 OK

3.8 kB

URL User Request GET HTTP/2
sparkasse-aktualisieren.de/jetzt-verbinden
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectsparkasse-aktualisieren.de
Fingerprint18:60:73:6C:47:C8:4C:5D:1D:93:A2:6C:2B:61:49:B4:B9:C6:92:74
ValidityMon, 18 Mar 2024 21:07:46 GMT - Sun, 16 Jun 2024 21:07:45 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4074), with no line terminators
Size
3.8 kB (3820 bytes)
Hash
71d8add39e574393c230870effadbd85
2525e3c695d98ac9b5bd2fa47a4154d4fc63c449
7e774f04ff0a4724459229d9aa3cc835f7ffab3cd7639e46f498bab086f5b5c8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Sparkasse Bank
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /jetzt-verbinden HTTP/1.1
Host: sparkasse-aktualisieren.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 15:58:23 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=9a3b1aefd9b827f1ff938ea1a4d66000; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iPkg5OsYCb3eTGCGbSVyf7P9QMzt6mGqrcTpMUbNUaqOXHPSq5b3to1rH2eXu2g6QAf5guJ7oZrUtlH6l5WCTaIIOIQF2nxDFpF6r%2FX2gPaglwQlrX2FjTrKx%2BSSQ%2Br%2Bhkq0VqnQZpZRUhwTWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87556062ae7e5696-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP