Report - sso-auth.com/wHOkOFlhxeK7tB6jNw

Report Overview

Visitedpublic

2025-05-03 15:40:04

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
sso-auth.com	unknown	2025-04-01	2025-04-22	2025-05-01	487 B	16 kB	212.104.128.2
res.cloudinary.com	2520	2011-05-24	2012-10-03	2025-05-01	502 B	6.0 kB	104.17.201.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	sso-auth.com/wHOkOFlhxeK7tB6jNw	ScriptElement	1.7 kB	2025-05-01	2025-05-04
URL sso-auth.com/wHOkOFlhxeK7tB6jNw IP / ASN 212.104.128.2 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-05-01 Last Seen 2025-05-04 Times Seen 4 Size 1.7 kB (1708 bytes) MD5 b56a0da6b656e75ecf1065c05ac557ab SHA1 ed30455fef564c9ed560a0e9afa0f8aa1f08e9bc SHA256 c62ca67ff20aa79ddc377696e1fe1cd97984f25b6e5222aa05093c43298fee1f Format Code Loading...

HTTP Transactions (2)

URL IP Response Size

GET sso-auth.com/wHOkOFlhxeK7tB6jNw

212.104.128.2

200 OK

15 kB

URL User Request GET HTTPS

sso-auth.com/wHOkOFlhxeK7tB6jNw

IP / ASN

212.104.128.2

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2025-05-01

Last Seen2025-05-04

Times Seen4

Size15 kB (15066 bytes)

MD56420a3a42d06923f381a29bc75651cd5

SHA1b1f67b549ac7cfaba37a836fe55054209ffbaa46

SHA2564f30572648d21bd445604476aaff132c328435a4db58b2a4a0123e40aa85e053

Certificate Info

IssuerGoogle Trust Services

Subjectsso-auth.com

Fingerprint0F:BE:77:99:C9:04:9B:6E:F9:00:E0:D2:26:7A:44:13:8F:C0:B5:84

ValidityTue, 08 Apr 2025 10:00:46 GMT - Mon, 07 Jul 2025 11:00:25 GMT

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook

HTTP Headers

GET /wHOkOFlhxeK7tB6jNw HTTP/1.1
Host: sso-auth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 03 May 2025 15:39:43 GMT
content-type: text/html
cf-cache-status: DYNAMIC
referer-policy: origin-when-cross-origin
set-cookie: INGRESSCOOKIE=1746286784.52.743.600783|112633931b9d22736a011431493af478; HttpOnly; Secure; Path=/quest/attachment/
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-hox-trace-id: 748d85456f2266dd097bad7a2b1c95a9
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 93a0da4c3e7babc2-CPH
content-encoding: gzip
X-Firefox-Spdy: h2

GET res.cloudinary.com/hoxhunt/image/upload/v1624260897/questTemplates/Social%20Media/Facebook/facebook-logo.png

104.17.201.1

200 OK

5.2 kB

URL GET HTTPS

res.cloudinary.com/hoxhunt/image/upload/v1624260897/questTemplates/Social%20Media/Facebook/facebook-logo.png

IP / ASN

104.17.201.1

#13335 CLOUDFLARENET

Requested byhttps://sso-auth.com/wHOkOFlhxeK7tB6jNw

Resource Info

File typePNG image data, 600 x 119, 8-bit colormap, non-interlaced

First Seen2025-03-31

Last Seen2025-05-17

Times Seen17

Size5.2 kB (5229 bytes)

MD5d312674b87fd720f10adfa658f95abfd

SHA1c1bc326073ce6642ba4aeb9a97fd31816a88e228

SHA256fabf4ef6c1462469c45c918005f3bbed5bcf9c92c33ff8585a0193d75d957fba

Certificate Info

IssuerGoDaddy.com, Inc.

Subject*.cloudinary.com

Fingerprint44:22:C9:20:F7:22:75:74:CA:13:F8:00:EB:CC:46:77:7E:66:AA:2B

ValidityTue, 23 Apr 2024 13:44:07 GMT - Sun, 25 May 2025 13:44:07 GMT

HTTP Headers

GET /hoxhunt/image/upload/v1624260897/questTemplates/Social%20Media/Facebook/facebook-logo.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sso-auth.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 03 May 2025 15:39:44 GMT
content-type: image/png
content-length: 5229
cf-ray: 93a0da505c1c56c1-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, no-transform, immutable, max-age=2592000
etag: "d312674b87fd720f10adfa658f95abfd"
last-modified: Mon, 21 Jun 2021 07:34:58 GMT
strict-transport-security: max-age=604800
vary: Accept-Encoding
access-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options
server-timing: cld-cloudflare;dur=32;start=2025-05-03T15:39:44.062Z;desc=hit,rtt;dur=1,content-info;desc="width=600,height=119,owidth=600,oheight=600,obytes=14265;"
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2