Report - www.palo.majesticbank.de/

Report Overview

Visited public
2025-04-24 22:13:35
Tags
URL
www.palo.majesticbank.de/
Finishing URL
www.palo.majesticbank.de/
IP / ASN
185.129.102.30
#57724 Ddos-guard Ltd
Title
Majestic Bank

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.palo.majesticbank.de	unknown	unknown	2025-04-24	2025-04-24	8.1 kB	982 kB	185.129.102.30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed
2025-04-24	medium	majesticbank.de	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

www.palo.majesticbank.de/assets/templates/mb/css/boot.php

185.129.102.30

200 OK

389 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/boot.php
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
389 kB (389066 bytes)
Hash
2237114d7f0cd3fc21d00a63d34f2026
9daa9ba076141fabb0ba1e13e385d95756cc07ed
b3ca18897deece043d974aac869f937b34f7bbac26bd6a64a555a1b593a35e0f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/boot.php HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=JM9qiMlVEWq6RsHk; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css;charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/assets/templates/mb/css/style.css

185.129.102.30

200 OK

79 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/style.css
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
79 kB (79009 bytes)
Hash
5514400bba85303f38d2973de823f1e0
5401b02d2e7f33f0b84bf37c6b85da557dc88ede
c2675cb9d136faf7192882dda7b917ea0c6be8053da54f3d14dc3377e249e61c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/style.css HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=sLQK5f88TCDkKNUW; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/assets/templates/mb/css/table.css

185.129.102.30

200 OK

2.7 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/table.css
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2668 bytes)
Hash
36cb656ee34bc6f9856b29f378e26915
b687bb3eb3dea79350f5f9d57deb586f9ab87e4b
54e40ab28faa47701c8f18cac2062ac8b9a37bb5a5cc1a92d8eadb5cf25afcc8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/table.css HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=XmMoYDcFyhynLqpL; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/assets/templates/mb/css/responsive.css

185.129.102.30

200 OK

38 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/responsive.css
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
ASCII text, with CRLF line terminators
Size
38 kB (37703 bytes)
Hash
a70d854c89e14974f89af265318d582c
e11351707716cc06b6ff1e1f2cd38b19f83a4fed
382764793fe1bf230f001d1bd41afa3cdd2a1edffd9f9026db7cbd00f6252be1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/responsive.css HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=Xr0utOuUsFO7yA7k; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/assets/templates/mb/css/color.php?color=177dc3&secondColor=121613

185.129.102.30

200 OK

66 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/color.php?color=177dc3&secondColor=121613
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
66 kB (65982 bytes)
Hash
6d5c0cebbc72039a5839c30ac42dbb88
65bac6cb8134f3366306e6ad12292d13763b9912
e8404ea715b37530d6d1e86437ee46103c8fc48f95d647cf57c9f7fb0de1f0c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/color.php?color=177dc3&secondColor=121613 HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=TyEmBPTewCsU9nt2; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css;charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/assets/templates/mb/css/p2pcustom.css

185.129.102.30

200 OK

6.5 kB

URL GET
www.palo.majesticbank.de/assets/templates/mb/css/p2pcustom.css
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Requested by
https://www.palo.majesticbank.de/
Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
ASCII text
Size
6.5 kB (6450 bytes)
Hash
bd00ae72b3e0d73f439677d36e3fda3e
9cac9495a0917361e0106f8572437b75785e068e
74d802a007f73fe4c8c56b52d3821308dc61b40992aaae346e36585a3aa0152a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/templates/mb/css/p2pcustom.css HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.palo.majesticbank.de/
Cookie: __ddg8_=3l7sQqeZxocVoIGs; __ddg10_=1745532793; __ddg9_=91.90.42.154; __ddg1_=lwcr0YZKLqSpPEoKlOhb; XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=HL0PBMCtIoMenmNj; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg10_=1745532795; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:15 GMT
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 25 Apr 2025 22:13:12 GMT
cache-control: max-age=86400, public, no-transform
content-encoding: br
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

www.palo.majesticbank.de/

185.129.102.30

200 OK

396 kB

URL User Request GET
www.palo.majesticbank.de/
IP
185.129.102.30:443
ASN
#57724 Ddos-guard Ltd

Certificate
IssuerLet's Encrypt
Subjectpalo.majesticbank.de
Fingerprint8F:C7:38:97:F8:2E:E6:91:E1:56:51:49:A4:8E:DC:A7:AF:CF:58:AD
ValidityFri, 04 Apr 2025 16:08:21 GMT - Thu, 03 Jul 2025 16:08:20 GMT

File type
HTML document, ASCII text, with very long lines (23549), with CRLF line terminators
Size
396 kB (395694 bytes)
Hash
b7a0a018f357d5f6d85abdaa7ef8cb4b
4f4af367bb5f2d34b30070b9de59f0a00a965665
125455b4d7e45b48885e7245e48282cd2ff4f1c672e332b2f2e81da6c6379dae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: www.palo.majesticbank.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=3l7sQqeZxocVoIGs; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:13 GMT
__ddg10_=1745532793; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:13 GMT
__ddg9_=91.90.42.154; Domain=.majesticbank.de; Path=/; Expires=Thu, 24-Apr-2025 22:33:13 GMT
__ddg1_=lwcr0YZKLqSpPEoKlOhb; Domain=.majesticbank.de; HttpOnly; Path=/; Expires=Fri, 24-Apr-2026 22:13:13 GMT
XSRF-TOKEN=eyJpdiI6Im1KbTBwamRRUnBnUVo4ZGFWTXJWQVE9PSIsInZhbHVlIjoieXg5bFp2RVJYRFNXeUZYN0ZLYmxYeWUxY2d2UDlBMVpJMU03QlZlR1hjU0d4N0UvZEdtbGd0T2lhWElOYW9JS1kxanhJVkZ4RnVxb0N6VWJnc1NGNEdSblcxdnJidEZ5eHkvUWxRL1dWWVNYKy91Q3ppeWl0VWpuOWM2b1RGbHkiLCJtYWMiOiI0MDk4ZjU2MzQ3Mzk5NTc4OTQzNjgxOGMwN2Y5NzE4Y2I1YWZjNWRhZDEzOTNhZTE5ZjkwNGY2YWU5NTViZGJlIn0%3D; expires=Fri, 25-Apr-2025 00:13:14 GMT; Max-Age=7200; path=/
mbank_session=eyJpdiI6IkVZLzRkUEJ3YkZsZVZ4T0I3S2p6SGc9PSIsInZhbHVlIjoiZG9oc0RZbk5QR1ZTQUVmTUdWcWF3czNJMnYzMlRvRDVyY0tldGNrWFRDam5KTjYzRkM0dGUxWDhKaVdhYmFpMndCc0Vob3lvT0JvcW9nUDhuSjJBQ1hzTzVKaUd3a01ZNTYrZjBMaTBLaVBTZ1ZuUnVGY2xNZGQzRndTNXdhUkwiLCJtYWMiOiJmMTQzNWFkYjNjOTYwN2IyODMzMjRjNjU2YWY3MjRjZjYyZGIwYjFhMDg5MmE1YTcyMWFhOTNmMTI2MDA4MjkxIn0%3D; expires=Fri, 25-Apr-2025 00:13:14 GMT; Max-Age=7200; path=/; httponly
content-security-policy: upgrade-insecure-requests;
date: Thu, 24 Apr 2025 22:13:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
x-frame-options: DENY
x-content-type-options: nosniff
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash