Report - six-gr0yp.ch/

Report Overview

Visited public
2025-04-27 13:17:36
Tags
phishing_box phishing
URL
six-gr0yp.ch/
Finishing URL
six-gr0yp.ch/
IP / ASN
64.238.34.20
#29802 HVC-AS
Title
Phishing Simulation Landing Page
Phishing - Phishing Box

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
six-gr0yp.ch	unknown	unknown	2025-04-27	2025-04-27	2.6 kB	291 kB	64.238.34.20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	six-gr0yp.ch/assets/js/bootstrap.min.js	ScriptElement	37 kB	2023-03-07	2025-05-16
Pretty URL six-gr0yp.ch/assets/js/bootstrap.min.js IP 64.238.34.20 ASN #29802 HVC-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-16 04:23 Times Seen27920 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	six-gr0yp.ch/assets/js/jquery.js	ScriptElement	87 kB	2023-03-07	2025-05-14
Pretty URL six-gr0yp.ch/assets/js/jquery.js IP 64.238.34.20 ASN #29802 HVC-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08 Last Seen2025-05-14 13:28 Times Seen302 Hash 6c013ea4cf6af491ac038943a68ad4fe 7704864ce63adb0d61f79acc3e5cc9ea488e35f6 35dc8edc236b06df2825bce1b00900e2e976ecdb928b02809647e7eb2f91bfc8 Loading...

HTTP Transactions (6)

URL IP Response Size

six-gr0yp.ch/assets/js/bootstrap.min.js

64.238.34.20

200 OK

37 kB

URL GET
six-gr0yp.ch/assets/js/bootstrap.min.js
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Requested by
https://six-gr0yp.ch/
Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
JavaScript source, ASCII text, with very long lines (32033)
Size
37 kB (37045 bytes)
Hash
5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Phishing Box

HTTP Headers

GET /assets/js/bootstrap.min.js HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://six-gr0yp.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
last-modified: Mon, 12 Jun 2023 17:28:31 GMT
etag: "90b5-5fdf20c2abe6e-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9833
content-type: application/javascript

six-gr0yp.ch/assets/css/bootstrap.css

64.238.34.20

200 OK

146 kB

URL GET
six-gr0yp.ch/assets/css/bootstrap.css
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Requested by
https://six-gr0yp.ch/
Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
ASCII text, with very long lines (540)
Size
146 kB (146010 bytes)
Hash
2a31dca112f26923b51676cb764c58d5
f597f59f955cda06e5d7a79342d9e0c22b5ec6d2
7e630d90c7234b0df1729f62b8f9e4bbfaf293d91a5a0ac46df25f2a6759e39a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Phishing Box

HTTP Headers

GET /assets/css/bootstrap.css HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://six-gr0yp.ch/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
last-modified: Mon, 12 Jun 2023 17:37:34 GMT
etag: "23a5a-5fdf22c85abc6-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 21330
content-type: text/css

six-gr0yp.ch/assets/img/phishingbox_logo.png

64.238.34.20

200 OK

15 kB

URL GET
six-gr0yp.ch/assets/img/phishingbox_logo.png
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Requested by
https://six-gr0yp.ch/
Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
PNG image data, 1200 x 523, 8-bit colormap, non-interlaced
Size
15 kB (14623 bytes)
Hash
dbd7fc56bc4da8db26060ace8755af73
3da1f0716f969c4c621e0b0a688c6638df72a6b3
537772c08f4088cd4c535a38aad43346ea650b1f964cefae4b91e3def40721cd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Phishing Box

HTTP Headers

GET /assets/img/phishingbox_logo.png HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://six-gr0yp.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains
last-modified: Tue, 31 Oct 2023 21:05:56 GMT
etag: "391f-609098550d9c5"
accept-ranges: bytes
content-length: 14623
content-type: image/png

six-gr0yp.ch/assets/js/jquery.js

64.238.34.20

200 OK

87 kB

URL GET
six-gr0yp.ch/assets/js/jquery.js
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Requested by
https://six-gr0yp.ch/
Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
JavaScript source, ASCII text, with very long lines (32030), with CR line terminators
Size
87 kB (86717 bytes)
Hash
6c013ea4cf6af491ac038943a68ad4fe
7704864ce63adb0d61f79acc3e5cc9ea488e35f6
35dc8edc236b06df2825bce1b00900e2e976ecdb928b02809647e7eb2f91bfc8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Phishing Box

HTTP Headers

GET /assets/js/jquery.js HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://six-gr0yp.ch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
last-modified: Wed, 31 May 2023 20:50:09 GMT
etag: "152bd-5fd03772ba1ac-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 30085
content-type: application/javascript

six-gr0yp.ch/favicon.ico

64.238.34.20

200 OK

2.5 kB

URL GET
six-gr0yp.ch/favicon.ico
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Requested by
https://six-gr0yp.ch/
Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
2.5 kB (2523 bytes)
Hash
b1f554f099b2d25a41f4348aa984a032
168d7ccfcfb90d0c379613758e9f73e67d4b4aa2
4f6f57fdaf770d671ad1026efe9f42fc3479f93c5b8e53a768ebb8d615932fea

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://six-gr0yp.ch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-length: 1104
content-type: text/html; charset=UTF-8

six-gr0yp.ch/

64.238.34.20

200 OK

2.5 kB

URL User Request GET
six-gr0yp.ch/
IP
64.238.34.20:443
ASN
#29802 HVC-AS

Certificate
IssuerLet's Encrypt
Subjectsix-gr0yp.ch
Fingerprint9F:70:59:F5:10:B2:07:2C:37:2C:47:8F:D2:6E:98:F6:9C:53:D5:83
ValiditySun, 20 Apr 2025 23:05:10 GMT - Sat, 19 Jul 2025 23:05:09 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
2.5 kB (2523 bytes)
Hash
b1f554f099b2d25a41f4348aa984a032
168d7ccfcfb90d0c379613758e9f73e67d4b4aa2
4f6f57fdaf770d671ad1026efe9f42fc3479f93c5b8e53a768ebb8d615932fea

HTTP Headers

GET / HTTP/1.1
Host: six-gr0yp.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sun, 27 Apr 2025 13:17:15 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
content-length: 1104
content-type: text/html; charset=UTF-8

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate