Report - infofraskatteetaten.com/pages

Report Overview

Submitted URL
infofraskatteetaten.com/pages
IP
91.215.85.79
ASN
#200593 Prospero Ooo
Submitted
2024-04-18 04:24:42
Access
public
Website Title
OIDC Client
Final URL
infofraskatteetaten.com/pages
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
infofraskatteetaten.com	unknown	unknown	No data	No data	5.1 kB	79 kB	91.215.85.79
csfe.bankid.no	unknown	2022-01-24	2017-01-30	2024-04-16	1.4 kB	1.5 kB	193.26.146.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	infofraskatteetaten.com/pages	BankID

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	infofraskatteetaten.com/js/cntdjs/cntd.js	2.8 kB	2023-03-07	2024-04-19
Pretty URL infofraskatteetaten.com/js/cntdjs/cntd.js IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:24:54 Last Seen2024-04-19 19:17:06 Times Seen707 Hash 0eee17a675c9c575c21ca0ee6571ca2a b7c192e04cc5dd6199c7fa7f9e4f38928571e055 5b056148977cddad1d04190e8588f71549f5fbce2c8504fd0a52699a451896ca Loading...

	csfe.bankid.no/CentralServerFEJS/b/KgAAAL2f1cP3S6QFyW7LwEavA4n4LGmaqdgvDrFPGcgpsLJmzcPc2-8XCRQP7z3h_WM6i97fpSLPKwNZOyleBjyk0RCj9p95W2s	108 B	2023-03-08	2024-04-19
Pretty URL csfe.bankid.no/CentralServerFEJS/b/KgAAAL2f1cP3S6QFyW7LwEavA4n4LGmaqdgvDrFPGcgpsLJmzcPc2-8XCRQP7z3h_WM6i97fpSLPKwNZOyleBjyk0RCj9p95W2s IP 193.26.146.36 ASN #207674 Vipps Mobilepay As Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:18:09 Last Seen2024-04-19 19:17:06 Times Seen356 Hash b240094d3e49a84bdfdba63a40242377 5f8e7405a1533718005063a1ad47236c50e9accc a1f96af0ff80beee233dd05a75843e48337554f85d93f5c533cb42bc8045220e Loading...

	infofraskatteetaten.com/js/cntdjs/jquery.js	90 kB	2023-03-07	2024-05-01
Pretty URL infofraskatteetaten.com/js/cntdjs/jquery.js IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-01 05:44:45 Times Seen263871 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	infofraskatteetaten.com/js/shared/loading.js	2.0 kB	2023-03-07	2024-04-19
Pretty URL infofraskatteetaten.com/js/shared/loading.js IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:34 Last Seen2024-04-19 19:17:06 Times Seen731 Hash f887f681e4eb3254fc34a0f2ba1f56b7 822eaf7d5d740537cdc7e5fff2bc506ade43cc7e 4bdc871a71df801aa86926434d6fbed9744ec4757af4e9d6d40978724ea59134 Loading...

	csfe.bankid.no/jsclient21/error.js	250 B	2023-06-22	2024-04-19
Pretty URL csfe.bankid.no/jsclient21/error.js IP 193.26.146.36 ASN #207674 Vipps Mobilepay As Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-22 07:35:47 Last Seen2024-04-19 19:17:06 Times Seen47 Hash d10d7bbcc0060267a4e9dec381cac89f 90947fa30e7e3d71bb9556f4cbd352e255df3849 c080371fd384e40ac7de4153b9a05b57a21362ce1f69d1f7ac7af1e28a6fc1e7 Loading...

	infofraskatteetaten.com/js/cntdjs/jquery.mask.js	23 kB	2023-03-07	2024-04-30
Pretty URL infofraskatteetaten.com/js/cntdjs/jquery.mask.js IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:34 Last Seen2024-04-30 12:51:43 Times Seen2700 Hash 24992f1ed62baf9393609f3c6c2ad20e 34716cf70f7f7a9cd072e7796c34ce987f85d18c a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8 Loading...

	infofraskatteetaten.com/js/shared/online_status.js	998 B	2023-03-07	2024-04-19
Pretty URL infofraskatteetaten.com/js/shared/online_status.js IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:34 Last Seen2024-04-19 19:17:06 Times Seen815 Hash ea63f1dec81ad7dd70e88f5e8d68ce2a 4caf64741cf659af90b0324d51d97a8958820afa e64e9d464beb9fe2717cd8bd8d093bb04d570f08a15c65f14533733904e12be7 Loading...

	data:text/javascript;base64,	0 B	2023-03-07	2024-05-01
Pretty URL data:text/javascript;base64, IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-01 05:47:56 Times Seen37237053 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	infofraskatteetaten.com/pages	100 B	2024-04-18	2024-04-18
Pretty URL infofraskatteetaten.com/pages IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 06:24:48 Last Seen2024-04-18 06:24:48 Times Seen1 Hash b2bc805c5b5470f273bd5ffa65ddf6b0 f98c1a1cd8e89f3ee507eece8e38c05214045a4b 1d9534b275820f7678eccccfdeb556b9bfb46d3ab169930285b44a34ae928a11 Loading...

	infofraskatteetaten.com/pages	491 B	2024-04-18	2024-04-19
Pretty URL infofraskatteetaten.com/pages IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 06:24:48 Last Seen2024-04-19 19:17:06 Times Seen2 Hash a1606530c0b7aba66a04961904cda0ea c5d0fbe0050e5a93386eef4918ebc00f3548ab63 1f180698eb2cd5a22123c2c43fe7b509e93a7a1d456964e1dc3c26e66f36fcd8 Loading...

	infofraskatteetaten.com/pages	35 B	2023-03-08	2024-04-19
Pretty URL infofraskatteetaten.com/pages IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:18:09 Last Seen2024-04-19 19:17:06 Times Seen25 Hash 462372ea4788c7f100e7ff0745dafb5f 021baef5947982b00432dd45af9d0faf9a2710c6 4deb35b9207d5740b987932bd4110471f7ff6a532bac29e2649d1abdf56ec440 Loading...

	infofraskatteetaten.com/pages	925 B	2023-03-08	2024-04-19
Pretty URL infofraskatteetaten.com/pages IP 91.215.85.79 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 16:18:09 Last Seen2024-04-19 19:17:06 Times Seen25 Hash 0552b4f7987a566287ed8dc03844cc37 805f0e0a17f98b9865227d91abf931b7c59f6222 01380fc228fa7c0c6aabeb3e49747a1fb9c389e2cf017fb941cf22400210a214 Loading...

HTTP Transactions (13)

URL IP Response Size

infofraskatteetaten.com/pages

91.215.85.79

200 OK

12 kB

URL User Request GET HTTP/2
infofraskatteetaten.com/pages
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4691), with CRLF line terminators
Size
12 kB (11836 bytes)
Hash
6fb3c6558fb067ecb03147d3498029dc
9538a7ba6694693724c88c7b10f398ddf1e62269
167b37c60485d34cd3bd4a633b75206cecc280500a7f64f6161ffbe1ac221722

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	BankID

HTTP Headers

GET /pages HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
set-cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 11836
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 04:24:16 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

infofraskatteetaten.com/front_end/front_end_files/oidc-client.min.css?1.1.0-7+274bc17a

91.215.85.79

200 OK

8.7 kB

URL GET HTTP/3
infofraskatteetaten.com/front_end/front_end_files/oidc-client.min.css?1.1.0-7+274bc17a
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
ASCII text, with very long lines (25612)
Size
8.7 kB (8694 bytes)
Hash
9ab9afb2ab228864b203b76d663e950c
bafd054822b5d967958245019bfd771662c9b856
0f701714eca75339b36fb25a551ab035e6ac88cbf1854fa3c5e4c794d43a3fb7

HTTP Headers

GET /front_end/front_end_files/oidc-client.min.css?1.1.0-7+274bc17a HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 04:24:16 GMT
content-type: text/css
last-modified: Fri, 12 Apr 2024 16:19:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8694
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/static/bifrost/js/oidc-client.min.js?1.1.0-7+274bc17a

91.215.85.79

404 Not Found

0 B

URL GET HTTP/3
infofraskatteetaten.com/static/bifrost/js/oidc-client.min.js?1.1.0-7+274bc17a
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/bifrost/js/oidc-client.min.js?1.1.0-7+274bc17a HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Thu, 18 Apr 2024 04:24:16 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

infofraskatteetaten.com/js/cntdjs/jquery.js

91.215.85.79

200 OK

30 kB

URL GET HTTP/3
infofraskatteetaten.com/js/cntdjs/jquery.js
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30267 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /js/cntdjs/jquery.js HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript
last-modified: Fri, 12 Apr 2024 16:19:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30267
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/js/cntdjs/jquery.mask.js

91.215.85.79

200 OK

5.6 kB

URL GET HTTP/3
infofraskatteetaten.com/js/cntdjs/jquery.mask.js
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
JavaScript source, ASCII text
Size
5.6 kB (5583 bytes)
Hash
24992f1ed62baf9393609f3c6c2ad20e
34716cf70f7f7a9cd072e7796c34ce987f85d18c
a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8

HTTP Headers

GET /js/cntdjs/jquery.mask.js HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript
last-modified: Fri, 12 Apr 2024 16:19:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5583
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/js/cntdjs/cntd.js

91.215.85.79

200 OK

889 B

URL GET HTTP/3
infofraskatteetaten.com/js/cntdjs/cntd.js
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
JavaScript source, ASCII text
Size
889 B (889 bytes)
Hash
0eee17a675c9c575c21ca0ee6571ca2a
b7c192e04cc5dd6199c7fa7f9e4f38928571e055
5b056148977cddad1d04190e8588f71549f5fbce2c8504fd0a52699a451896ca

HTTP Headers

GET /js/cntdjs/cntd.js HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript
last-modified: Fri, 12 Apr 2024 16:19:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 889
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/js/shared/loading.js

91.215.85.79

200 OK

640 B

URL GET HTTP/3
infofraskatteetaten.com/js/shared/loading.js
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
JavaScript source, ASCII text
Size
640 B (640 bytes)
Hash
f887f681e4eb3254fc34a0f2ba1f56b7
822eaf7d5d740537cdc7e5fff2bc506ade43cc7e
4bdc871a71df801aa86926434d6fbed9744ec4757af4e9d6d40978724ea59134

HTTP Headers

GET /js/shared/loading.js HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript
last-modified: Fri, 12 Apr 2024 16:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 640
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/js/shared/online_status.js

91.215.85.79

200 OK

383 B

URL GET HTTP/3
infofraskatteetaten.com/js/shared/online_status.js
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
JavaScript source, ASCII text
Size
383 B (383 bytes)
Hash
ea63f1dec81ad7dd70e88f5e8d68ce2a
4caf64741cf659af90b0324d51d97a8958820afa
e64e9d464beb9fe2717cd8bd8d093bb04d570f08a15c65f14533733904e12be7

HTTP Headers

GET /js/shared/online_status.js HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/javascript
last-modified: Fri, 12 Apr 2024 16:19:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 383
date: Thu, 18 Apr 2024 04:24:16 GMT

infofraskatteetaten.com/front_end/front_end_files/bid_202201130932.css

91.215.85.79

200 OK

17 kB

URL GET HTTP/3
infofraskatteetaten.com/front_end/front_end_files/bid_202201130932.css
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
17 kB (17413 bytes)
Hash
aa9322e3fbc491114c4ed15fa0f8ca10
2f8344e0b1bed57718b389442bbcd403589505fb
68865208ac1cc3b9a6a8bf2e7a8c6e95d90be33bbfd73bb9c682034199f176a4

HTTP Headers

GET /front_end/front_end_files/bid_202201130932.css HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 04:24:16 GMT
content-type: text/css
last-modified: Fri, 12 Apr 2024 16:19:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17413
date: Thu, 18 Apr 2024 04:24:16 GMT

csfe.bankid.no/jsclient21/error.js

193.26.146.36

200 OK

250 B

URL GET HTTP/1.1
csfe.bankid.no/jsclient21/error.js
IP
193.26.146.36:443
ASN
#207674 Vipps Mobilepay As

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerGlobalSign nv-sa
Subjectcsfe.bankid.no
FingerprintF1:A5:DB:B2:D2:E4:13:D1:8B:1F:2E:DC:C4:11:C6:08:87:C5:DC:31
ValidityMon, 26 Feb 2024 12:10:41 GMT - Sat, 29 Mar 2025 12:10:40 GMT

File type
JavaScript source, ASCII text
Size
250 B (250 bytes)
Hash
d10d7bbcc0060267a4e9dec381cac89f
90947fa30e7e3d71bb9556f4cbd352e255df3849
c080371fd384e40ac7de4153b9a05b57a21362ce1f69d1f7ac7af1e28a6fc1e7

HTTP Headers

GET /jsclient21/error.js HTTP/1.1
Host: csfe.bankid.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 04:24:16 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
ETag: W/"250-1698318222000"
Last-Modified: Thu, 26 Oct 2023 11:03:42 GMT
Content-Type: application/javascript
Content-Length: 250
Cache-Control: max-age=0
Expires: Thu, 18 Apr 2024 04:24:16 GMT
Connection: close

csfe.bankid.no/CentralServerFEJS/Gateway/helper21.js?cid=1i2oCUMt56e3Xq8F

193.26.146.36

200 OK

0 B

URL GET HTTP/1.1
csfe.bankid.no/CentralServerFEJS/Gateway/helper21.js?cid=1i2oCUMt56e3Xq8F
IP
193.26.146.36:443
ASN
#207674 Vipps Mobilepay As

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerGlobalSign nv-sa
Subjectcsfe.bankid.no
FingerprintF1:A5:DB:B2:D2:E4:13:D1:8B:1F:2E:DC:C4:11:C6:08:87:C5:DC:31
ValidityMon, 26 Feb 2024 12:10:41 GMT - Sat, 29 Mar 2025 12:10:40 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /CentralServerFEJS/Gateway/helper21.js?cid=1i2oCUMt56e3Xq8F HTTP/1.1
Host: csfe.bankid.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 04:24:16 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 0
Connection: close
Content-Type: application/javascript

csfe.bankid.no/CentralServerFEJS/b/KgAAAL2f1cP3S6QFyW7LwEavA4n4LGmaqdgvDrFPGcgpsLJmzcPc2-8XCRQP7z3h_WM6i97fpSLPKwNZOyleBjyk0RCj9p95W2s

193.26.146.36

200 OK

108 B

URL GET HTTP/1.1
csfe.bankid.no/CentralServerFEJS/b/KgAAAL2f1cP3S6QFyW7LwEavA4n4LGmaqdgvDrFPGcgpsLJmzcPc2-8XCRQP7z3h_WM6i97fpSLPKwNZOyleBjyk0RCj9p95W2s
IP
193.26.146.36:443
ASN
#207674 Vipps Mobilepay As

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerGlobalSign nv-sa
Subjectcsfe.bankid.no
FingerprintF1:A5:DB:B2:D2:E4:13:D1:8B:1F:2E:DC:C4:11:C6:08:87:C5:DC:31
ValidityMon, 26 Feb 2024 12:10:41 GMT - Sat, 29 Mar 2025 12:10:40 GMT

File type
JavaScript source, ASCII text
Size
108 B (108 bytes)
Hash
b240094d3e49a84bdfdba63a40242377
5f8e7405a1533718005063a1ad47236c50e9accc
a1f96af0ff80beee233dd05a75843e48337554f85d93f5c533cb42bc8045220e

HTTP Headers

GET /CentralServerFEJS/b/KgAAAL2f1cP3S6QFyW7LwEavA4n4LGmaqdgvDrFPGcgpsLJmzcPc2-8XCRQP7z3h_WM6i97fpSLPKwNZOyleBjyk0RCj9p95W2s HTTP/1.1
Host: csfe.bankid.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 04:24:16 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-control: no-cache, no-store, must-revalidate, max-age=0
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Type: application/javascript;charset=UTF-8
Content-Length: 108
Expires: Thu, 18 Apr 2024 04:24:16 GMT
Connection: close

infofraskatteetaten.com/favicon.ico

91.215.85.79

404 Not Found

708 B

URL GET HTTP/3
infofraskatteetaten.com/favicon.ico
IP
91.215.85.79:443
ASN
#200593 Prospero Ooo

Requested by
https://infofraskatteetaten.com/pages
Certificate
IssuerLet's Encrypt
Subjectinfofraskatteetaten.com
Fingerprint09:04:10:0A:DB:27:64:50:40:3E:4B:A6:D2:32:B8:A1:4B:83:8B:4B
ValidityTue, 16 Apr 2024 15:09:56 GMT - Mon, 15 Jul 2024 15:09:55 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
708 B (708 bytes)
Hash
2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: infofraskatteetaten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://infofraskatteetaten.com/pages
Cookie: PHPSESSID=0c54f1d7d8216d70342563989cd10ff7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Thu, 18 Apr 2024 04:24:17 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML