| cn36312.tw1.ru/files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css |  185.114.247.170 | 200 OK | 924 B |
URL GET HTTP/2cn36312.tw1.ru/files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeASCII text, with CRLF line terminators Hasheabaf0aaf10e39b24e4bc7c25d2e7ec8 d0e48a9cdb4d870b510d88cdfc325a2614071327 31525381d30528a71a4c4419b0ee495b4053428b061e75ac0e9556b00d56d1e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/css/spec56_btn_gsm_all_gcd_20190320190559.min.css HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/css
content-length: 924
last-modified: Sat, 30 Dec 2023 19:10:07 GMT
etag: "65906b0f-39c"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/logo-sg-muet.svg | 185.114.247.170 | 200 OK | 402 B |
URL GET HTTP/2cn36312.tw1.ru/files/img/logo-sg-muet.svg IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeSVG Scalable Vector Graphics image Hash392bde7f3217782d2f98bff1db922a9c ce2e5b3a064e2dfa92039cc1caa37d8c6d3e144f 38f90a05ed700e9adb2b37d23337eee3be2c658bdb1f38f258c15920b36d1676
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/logo-sg-muet.svg HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/svg+xml
content-length: 402
last-modified: Sat, 30 Dec 2023 19:11:25 GMT
etag: "65906b5d-192"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/loader.gif | 185.114.247.170 | 200 OK | 1.4 kB |
URL GET HTTP/2cn36312.tw1.ru/files/img/loader.gif IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeGIF image data, version 89a, 50 x 10 Hash56e2ee0bb059a8935c7202981a138aec cd034b57040a779d70f2a5a19ef2833776daa4a3 31bf10d91090efb0932a4560d50ce0ed40e9d961374175331b008be7865142d6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/loader.gif HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/gif
content-length: 1379
last-modified: Sat, 30 Dec 2023 19:11:25 GMT
etag: "65906b5d-563"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/trame.png | 185.114.247.170 | 200 OK | 208 B |
URL GET HTTP/2cn36312.tw1.ru/files/img/trame.png IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typePNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced Hashf9dc6373846a99bfe761d3427d50632d 685843d14882374bcf6b0798ab60bbecc84567a8 d41b3311daa52ffdfb112169926c6b68fee615ea6c72abac25fa1dbe799131d5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/trame.png HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/index_20190723161948.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/png
content-length: 208
last-modified: Sat, 30 Dec 2023 19:11:48 GMT
etag: "65906b74-d0"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/logo-sg-seul.svg | 185.114.247.170 | 200 OK | 11 kB |
URL GET HTTP/2cn36312.tw1.ru/files/img/logo-sg-seul.svg IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typegzip compressed data, from Unix Hash2b5feaab423a148f0a80ddea8ac07e03 a9463f15e6dfdfc38fd8d205b587175ff28eb5ba 89480579b9b7df1a41306cabd19a9be50d22dd50bcdfe03ffe42516649088b10
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/logo-sg-seul.svg HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/svg+xml
last-modified: Sat, 30 Dec 2023 19:11:26 GMT
vary: Accept-Encoding
etag: W/"65906b5e-be2"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/css/print_20190320190559.min.css | 185.114.247.170 | 200 OK | 1.1 kB |
URL GET HTTP/2cn36312.tw1.ru/files/css/print_20190320190559.min.css IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typegzip compressed data, from Unix Hash0aad98f72e435e7109373156665e61ee 8abe62d06b5b5f36f8737baae33279a3063b7c16 9a77ef4d60b20cf87dfc4d4bc4d3f0e69443cbe4961a40b70237109d0d732305
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Societe Generale |
GET /files/css/print_20190320190559.min.css HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/css
last-modified: Sat, 30 Dec 2023 19:10:06 GMT
vary: Accept-Encoding
etag: W/"65906b0e-bfb"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/fonts/sourcesanspro-semibold.eot | 185.114.247.170 | 404 Not Found | 196 B |
URL GET HTTP/2cn36312.tw1.ru/files/fonts/sourcesanspro-semibold.eot IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/fonts/sourcesanspro-semibold.eot HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/fonts/sourcesanspro-regular.woff | 185.114.247.170 | 200 OK | 75 kB |
URL GET HTTP/2cn36312.tw1.ru/files/fonts/sourcesanspro-regular.woff IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeWeb Open Font Format, CFF, length 75420, version 0.0 Hash52f5045b30343cd0e0a5acbd215a50e9 dc37d3ef1b5939ad6a5dfae601ae183c503095f2 f679efce1ea9cbed26a573aa8c8db1d01fe51abe4fcc2a77d18ab7bcb03e0bb1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/fonts/sourcesanspro-regular.woff HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: application/font-woff
content-length: 75420
last-modified: Sat, 30 Dec 2023 19:10:43 GMT
etag: "65906b33-1269c"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/fonts/sourcesanspro-semibold.woff | 185.114.247.170 | 200 OK | 75 kB |
URL GET HTTP/2cn36312.tw1.ru/files/fonts/sourcesanspro-semibold.woff IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeWeb Open Font Format, CFF, length 74996, version 0.0 Hashf079be3e96761bf618ea2a5b314eb014 2aad9b3d874cdd21ee8496738af5f5b94c7382a0 b2106f33585940e944fac6de500dd767c4592692689c001c45c475476583404e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/fonts/sourcesanspro-semibold.woff HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: application/font-woff
content-length: 74996
last-modified: Sat, 30 Dec 2023 19:10:54 GMT
etag: "65906b3e-124f4"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/favicon.ico | 185.114.247.170 | 200 OK | 318 B |
URL GET HTTP/2cn36312.tw1.ru/files/img/favicon.ico IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 16 colors Hashca10c09aeaf43460d3760f50c608eb51 f2ed2a4fe0e1eadb7dd28444ea6b7a04abf0d38e daf58b06a09d467436ee5fd10eefbeadac3cf6ecaef1eca1884ef8330f561642
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/favicon.ico HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/x-icon
content-length: 318
last-modified: Sat, 30 Dec 2023 19:11:20 GMT
etag: "13e-60dbee9fb72c3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml |  35.244.181.201 | | 5.8 kB |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0
File typegzip compressed data, max speed, from Unix Hashf3d07ad945c8c3b93c223e5931b73af4 82383fa91917741b5bc5be542438e30ade7289b2 e5fdb21341b3cacfdddacd06e03606991a439ce0eba926a8b5eb267579a88429
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 02 Jan 2024 15:51:35 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-02-08-20-06-05.chain; p384ecdsa=CBvHy0D7m-agiEkY_CxBLxlOI75qbAUpEbXlKHQv_BXrYHdgt2qD_IlX3uTQG91c1JcJae0fJfmXHNVpa9yHEVTiShRl_XQNo0ghe08xUjhaP8KZBvZ6awtMQlPIDb8l
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip |  2.22.61.59 | | 512 kB |
URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip IP2.22.61.59:0 ASN#20940 Akamai International B.V.
File typeZip archive data, at least v2.0 to extract, compression method=deflate Size512 kB (511815 bytes) Hash152eda253e242e18443ef3282495bc7c ff0fa85565f21ec4931baad4573b4c0bd08c4019 8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx35e1afa589ba4bd9a93ea-006556c567dfw1
Cache-Control: public, max-age=155124
Expires: Thu, 04 Jan 2024 10:56:59 GMT
Date: Tue, 02 Jan 2024 15:51:35 GMT
Connection: keep-alive
|
|
| cn36312.tw1.ru/files/img/new_sprite.png | 185.114.247.170 | 200 OK | 10 kB |
URL GET HTTP/2cn36312.tw1.ru/files/img/new_sprite.png IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typePNG image data, 312 x 104, 8-bit/color RGBA, non-interlaced Hash675d3d69bb78ed155d9d443bef4cccd8 8266846da238de6218a75a11744f35f821baff74 0d477834d11f75ff989d2b6bfbcbaaed80a8e4f8efe65569f4cee2ad603a73af
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/new_sprite.png HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/png
content-length: 9961
last-modified: Sat, 30 Dec 2023 19:11:29 GMT
etag: "65906b61-26e9"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| | 185.114.247.170 | 200 OK | 15 kB |
URL User Request GET HTTP/2IP185.114.247.170:443
CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Societe Generale |
GET /sms.php HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/css/style.css | 185.114.247.170 | 200 OK | 180 kB |
URL GET HTTP/2cn36312.tw1.ru/files/css/style.css IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeASCII text, with very long lines (1330), with CRLF line terminators Size180 kB (180495 bytes) Hash1f236b933d9108a8f6ad7672f40a097f 88a3cffda08247363d328b68252910390601ba3f 1f553a143ee858f8c7002b84160ec73dedbedb8377937ca593efda6a4f468a27
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/css/style.css HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/css
last-modified: Sat, 30 Dec 2023 19:10:12 GMT
vary: Accept-Encoding
etag: W/"65906b14-2c10f"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/img/logo-sg.svg | 185.114.247.170 | 200 OK | 2.7 kB |
URL GET HTTP/2cn36312.tw1.ru/files/img/logo-sg.svg IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeSVG Scalable Vector Graphics image Hashb4f56d34324b688214e157c75f951040 edd67e5e818474e20e9aee31aee0259505a319a0 a9c04fd07d93be1b755615613139830f5192ad02cdf3418e741abdf06319fff8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/img/logo-sg.svg HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: image/svg+xml
last-modified: Sat, 30 Dec 2023 19:11:27 GMT
vary: Accept-Encoding
etag: W/"65906b5f-a6a"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/css/index_20190723161948.min.css | 185.114.247.170 | 200 OK | 267 kB |
URL GET HTTP/2cn36312.tw1.ru/files/css/index_20190723161948.min.css IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeASCII text, with very long lines (310), with CRLF line terminators Size267 kB (267414 bytes) Hash3ceb0fb380c636a6e7849491323d71b0 0bc15dd5af9e83955b3d12f8d08e36f7ebf434de f513229e1ccc5679b510e10814c2dcb9431574dfcdf2ad7d0e24a67c8344c9cd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/css/index_20190723161948.min.css HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/css
last-modified: Sat, 30 Dec 2023 19:10:05 GMT
vary: Accept-Encoding
etag: W/"65906b0d-41496"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/css/inbenta.css | 185.114.247.170 | 200 OK | 141 kB |
URL GET HTTP/2cn36312.tw1.ru/files/css/inbenta.css IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeASCII text, with very long lines (65307) Size141 kB (140938 bytes) Hash24b79f19be4d1c57be83a9bb799615cc 12c70f9acbee3bfc0daf608798d3185dfeac8761 7a0960947283e10fd527c3b96b64ab4781f68c3c7f820cd0f1e9a42b96bae233
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Societe Generale | | OpenPhish | phishing | Societe Generale |
GET /files/css/inbenta.css HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/sms.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/css
last-modified: Sat, 30 Dec 2023 19:09:48 GMT
vary: Accept-Encoding
etag: W/"65906afc-2268a"
expires: Wed, 01 Jan 2025 15:51:16 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cn36312.tw1.ru/files/fonts/sourcesanspro-regular.eot | 185.114.247.170 | 404 Not Found | 196 B |
URL GET HTTP/2cn36312.tw1.ru/files/fonts/sourcesanspro-regular.eot IP185.114.247.170:443
Requested byhttps://cn36312.tw1.ru/sms.php CertificateIssuerLet's Encrypt Subject*.tw1.ru FingerprintBE:30:DD:C1:4A:FC:2B:23:D7:8A:39:DA:CD:99:82:A1:7A:07:99:36 ValidityFri, 03 Nov 2023 11:58:21 GMT - Thu, 01 Feb 2024 11:58:20 GMT
File typeHTML document, ASCII text, with no line terminators Hash4c2721a6662ce6d1ac5be54d16d51d12 a1541245769dedbff563e4ff40a83cb8d675e6e8 d3887c1020b92158055e9155e606f4cb8bed040d5a67e7550e74e8efbe649f8b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Societe Generale |
GET /files/fonts/sourcesanspro-regular.eot HTTP/1.1
Host: cn36312.tw1.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cn36312.tw1.ru/files/css/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx/1.24.0
date: Tue, 02 Jan 2024 15:51:16 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
X-Firefox-Spdy: h2
|
|