Report - www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php

Report Overview

Submitted URL
www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
IP
20.203.169.150
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-02-04 01:12:45
Access
Website Title
Final URL
Tags
nordea financial phishing
urlquery detections
Phishing - Nordea

Detections

urlquery
16
Network Intrusion Detection
1
Threat Detection Systems
56

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	357 B	712 B	216.58.211.3
dtsedge.com	50405	2016-07-13T20:11:09Z	2023-03-13T04:50:05Z	427 B	878 B	188.114.97.1
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
www.mitid-approve.20-203-169-150.cprapid.com	unknown	2023-01-24T03:12:24Z	2023-03-12T01:58:31Z	7.5 kB	213 kB	20.203.169.150
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.3 kB	69 kB	34.120.237.76
www.mitid.dk	unknown	2017-04-03T14:46:36Z	2023-03-13T06:54:49Z	3.1 kB	15 kB	95.100.107.92
www.gstatic.com	unknown	2016-07-26T11:37:06Z	2023-03-13T07:57:11Z	365 B	2.5 kB	142.250.74.35
de.tynt.com	1252	2013-08-06T03:33:59Z	2023-03-13T07:56:02Z	488 B	329 B	67.202.105.33
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	95.101.11.115
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-13T08:22:43Z	680 B	1.9 kB	104.18.32.68
whos.amung.us	12687	2014-04-02T16:27:13Z	2023-03-13T07:28:15Z	431 B	296 B	104.22.74.171
cdn.tynt.com	7260	2012-05-21T18:51:48Z	2023-03-13T08:41:50Z	381 B	7.1 kB	104.18.36.173
ic.tynt.com	4300	2013-08-06T03:33:59Z	2023-03-13T08:58:22Z	2.2 kB	1.2 kB	67.202.105.33
t.dtscout.com	11951	2017-01-30T05:52:42Z	2023-03-13T05:10:53Z	462 B	977 B	141.101.120.11
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	44.240.124.200
widgets.amung.us	12623	2012-05-21T21:25:54Z	2023-03-13T08:13:33Z	388 B	4.2 kB	172.67.8.141

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-02-04 01:13:09	medium	20.203.169.150	Client IP	ET PHISHING Possible Phish - Saved Website Comment Observed

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-02-03	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php	Generic/Spear Phishing

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/no-connection-83f79e2367a313b468986e12a237c346.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/empty-3857ebe69f653487f8c9d99adde4657f.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/service-break-f426cda35f41e4c0b7c30c814b5eb2ee.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg	Phishing
2023-02-04	medium	www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed
2023-02-03	medium	cprapid.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	whos.amung.us/pingjs/?k=nord11&t=MITiD&c=s&x=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&y=&a=0&d=1.904&v=27&r=9460	25 B	2023-03-10	2023-03-13
Pretty URL whos.amung.us/pingjs/?k=nord11&t=MITiD&c=s&x=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&y=&a=0&d=1.904&v=27&r=9460 IP 104.22.74.171 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 23:08:10 Last Seen2023-03-13 16:14:58 Times Seen1 Hash 0e06a07fa7c45cbd3cb08250fc19892b 0f5a06053d044c0bb1ccc321b674457fc54a6d82 d02845372b95146bc41d08c9d72e0390551ff81810791e4bfaf657c6cbb56afd Loading...

	t.dtscout.com/i/?l=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&j=	2.4 kB	2023-03-07	2024-04-26
Pretty URL t.dtscout.com/i/?l=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&j= IP 141.101.120.11 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:48 Last Seen2024-04-26 08:14:36 Times Seen199 Hash eeddc8bda4ef62b1f028b0ad5eaef558 b7b4f67024d1824f1b8d790601f89f0e34323d74 260af059a282fc14974acae34eed706329c0ae28e223dd4595d316b1c55816a4 Loading...

	t.dtscout.com/pv/?_a=v&_h=mitid-approve.20-203-169-150.cprapid.com&_ss=1hkhzk7eay&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2ew6&_cb=_dtspv.c	52 B	2023-03-13	2023-03-13
Pretty URL t.dtscout.com/pv/?_a=v&_h=mitid-approve.20-203-169-150.cprapid.com&_ss=1hkhzk7eay&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2ew6&_cb=_dtspv.c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 16:14:58 Last Seen2023-03-13 16:14:58 Times Seen1 Hash af06d094a58bbbcb7e0545a74dd269fd 41ce1f9b4e99b9248b3d0445bfbd6dbcfedf259d 01e8e73914243a69193ce2085b6332ee105c1a20f3262e7a6ea2995907ffaa50 Loading...

	cdn.tynt.com/tc.js	18 kB	2023-03-12	2023-04-12
Pretty URL cdn.tynt.com/tc.js IP 104.18.36.173 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:00:16 Last Seen2023-04-12 18:52:43 Times Seen322 Hash 941b84de4e43aed4733ad9b8f717f06c ed1192d22b11e5c1c26d9b4b66d22a68a44977fe 9dab070ee75ce06cf5e8bb6ab989f0130e40f216a1a717d6a0538a57f5143fec Loading...

	dtsedge.com/ping/?t=0&d=mitid-approve.20-203-169-150.cprapid.com	0 B	2023-03-07	2024-04-26
Pretty URL dtsedge.com/ping/?t=0&d=mitid-approve.20-203-169-150.cprapid.com IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 10:03:57 Times Seen37089264 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	de.tynt.com/deb/v2?id=w!nord11&dn=TC&cc=1&r=&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php	4 B	2023-03-07	2024-04-24
Pretty URL de.tynt.com/deb/v2?id=w!nord11&dn=TC&cc=1&r=&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php IP 67.202.105.33 ASN #32748 STEADFAST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2024-04-24 03:12:14 Times Seen3075 Hash 350fd6ef6446635f7a8f608434a405ec a4b6c275ac2c80ec925b5c0c5c6abb79ba897356 d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179 Loading...

	www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php	234 B	2023-03-08	2023-03-25
Pretty URL www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php IP 20.203.169.150 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:52:12 Last Seen2023-03-25 22:45:56 Times Seen2 Hash 5572e6f7336a7a8823b965c31a6c2f5e 2378028bdb3cec9df9fea70b8367217a8ce8d97a 06b5c81f1ccc6b5703c7d3ef7fd990fbdd5ded5a661917ec32be41f7bb18e1cc Loading...

	widgets.amung.us/small.js	8.6 kB	2023-03-08	2024-04-26
Pretty URL widgets.amung.us/small.js IP 172.67.8.141 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:29:44 Last Seen2024-04-26 08:14:36 Times Seen2484 Hash a41caf5294227669425cd5135a26b2a0 a26a13f88c51c37b58fbd8a6b444e9b9150fae16 2052a227c361a7e99ea70f5bdcf54cd9e6c6b493dd4d20b73b376d94ce0dc0d1 Loading...

		Size	First Seen	Last Seen
	#1 Eval - b2c2041f8d99c45e0f21474fe4f8b7bc	17 B	2023-03-07	2024-04-26
Pretty Observations First Seen2023-03-07 01:03:01 Last Seen2024-04-26 01:51:27 Times Seen7451 Hash b2c2041f8d99c45e0f21474fe4f8b7bc 0b876666393469c726a2e3edbb29544c03a92154 17f5bfdbae6b35ae8bc3b27c069526d694021fe1e37a8027678e770fbb05e061 Loading...

	#2 Eval - 9c6f8328cad252c79720cdebcb48012b	226 B	2023-03-07	2023-05-06
Pretty Observations First Seen2023-03-07 01:03:01 Last Seen2023-05-06 00:45:04 Times Seen958 Hash 9c6f8328cad252c79720cdebcb48012b b853e7b92b0b23aa07f59b4816740de095331d47 bb037a2c6d9cf7fa65d8570beb76b1a31c360826ed6edb8612a584aa1918d62d Loading...

HTTP Transactions (56)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ec47f9eed203ae063b9c210009de54a9
19ff156471b9cffbc2432c5b65543bdd18e36271
3974208ce1840f6c9467287b7e220379ed881d76db64939f411dbc500c103d48

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18031
Expires: Sat, 04 Feb 2023 06:13:05 GMT
Date: Sat, 04 Feb 2023 01:12:34 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11357
Expires: Sat, 04 Feb 2023 04:21:51 GMT
Date: Sat, 04 Feb 2023 01:12:34 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Sat, 04 Feb 2023 02:56:03 GMT
Date: Sat, 04 Feb 2023 01:12:34 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 00:43:35 GMT
content-type: application/json
age: 1739
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: etsnBiU7UcZIUqghJqZ6xRSBpqdRbPYfI36hL+FP75JNB4vnr8QE8hUDRgkSR30y0bNkt2mO8ds=
x-amz-request-id: ZWBDSQ8GJHRDQNDZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 00:52:38 GMT
age: 1196
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 01:12:34 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 00:49:07 GMT
age: 1408
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16360
Expires: Sat, 04 Feb 2023 05:45:15 GMT
Date: Sat, 04 Feb 2023 01:12:35 GMT
Connection: keep-alive

push.services.mozilla.com/

44.240.124.200

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.240.124.200:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y/8S/rLBDIHcuvUHAAu52g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zGB7S23RTutnxDzOCAAARg5TgFA=

www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php

20.203.169.150

200 OK

24 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (805), with CRLF line terminators
Size
24 kB (24418 bytes)
Hash
70dfea9414cf5354d93a82628a5ebf5b
df664443c5c0ce9188798badba07679f59c212b6
c835b780a6943a3578188b6f4055446b40479012ec87b17d40ee19cf20ba16c2

Detections

Analyzer	Verdict	Alert
openphish	Generic/Spear Phishing
fortinet	Phishing
quad9	Sinkholed

NIDS	Severity	Alert
suricata	medium	ET PHISHING Possible Phish - Saved Website Comment Observed

HTTP Headers

GET /nord1/login.php HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:35 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/translateelement.css

20.203.169.150

200 OK

19 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/translateelement.css
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (18670)
Size
19 kB (18724 bytes)
Hash
15ab5dfc566a9a19f6e89a72b7819e43
064aac1e8bc5a26c5986e40659bc328157ec3b53
5d0a6e3bc914db376bf187c380750b197c317e1bf40fab9ad959ad5facd8f9ed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
quad9	Sinkholed

HTTP Headers

GET /nord1/all/translateelement.css HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 18724
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download

20.203.169.150

404 Not Found

315 B

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/scripts-6db7f1f3edd0e72b01f4957bf91c3b91.js.download HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 404 Not Found
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css

20.203.169.150

200 OK

46 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
assembler source, ASCII text
Size
46 kB (46070 bytes)
Hash
d1aafd46c75fda47a8d4fc4292ec3fcc
d5570e9d09d74ca0b4495992fec5ef86573c4437
068ee6c88c6d2629f9a797dac9288490b736f0c944d9a46d566da7cd8f913a1b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
quad9	Sinkholed

HTTP Headers

GET /nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Sat, 06 Aug 2022 19:29:08 GMT
Accept-Ranges: bytes
Content-Length: 46070
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mitid-approve.20-203-169-150.cprapid.com/nord1/mitd.css

20.203.169.150

200 OK

56 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/mitd.css
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document, Unicode text, UTF-8 text, with very long lines (600), with CRLF line terminators
Size
56 kB (56031 bytes)
Hash
5a21067ac284a061587d007135e25e7d
8432c7216311654c790999d4abcdef357b75b6da
7d1472924fee85ca472092b52ca1e70ee4192dc3410a7e3d89a452e07aa6001e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
quad9	Sinkholed

HTTP Headers

GET /nord1/mitd.css HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Mon, 31 Oct 2022 19:47:18 GMT
Accept-Ranges: bytes
Content-Length: 56031
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/no-connection-83f79e2367a313b468986e12a237c346.svg

20.203.169.150

200 OK

5.0 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/no-connection-83f79e2367a313b468986e12a237c346.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4974), with no line terminators
Size
5.0 kB (4974 bytes)
Hash
83f79e2367a313b468986e12a237c346
6b0d0f5df661c328a99aefa3b9388507f35d7fba
3fc2607b1e133fb89affeca8fa96db25e9af2fa9d2f7960d2a9602df9e96ef72

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/no-connection-83f79e2367a313b468986e12a237c346.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 4974
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg

20.203.169.150

200 OK

3.1 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3104), with no line terminators
Size
3.1 kB (3104 bytes)
Hash
9bbd07dc81f3c2a11d2c7735b416ee18
41ee4ad48472fd2f93f765b87c77a606a04e5a00
a386a6170805a64ba2e46bcc37c79500b5207bd708b0d1da83cbcbc483e64cb7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/something-went-wrong-9bbd07dc81f3c2a11d2c7735b416ee18.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 3104
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/empty-3857ebe69f653487f8c9d99adde4657f.svg

20.203.169.150

200 OK

1.6 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/empty-3857ebe69f653487f8c9d99adde4657f.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1642), with no line terminators
Size
1.6 kB (1642 bytes)
Hash
3857ebe69f653487f8c9d99adde4657f
134737f1f8882726ef1b50546546fa9d1479207c
d690ce1d3a1304fff86d11c4f38ad540da84949d881ea0c04b49bcc0f13483e0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/empty-3857ebe69f653487f8c9d99adde4657f.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 1642
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/service-break-f426cda35f41e4c0b7c30c814b5eb2ee.svg

20.203.169.150

200 OK

2.8 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/service-break-f426cda35f41e4c0b7c30c814b5eb2ee.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2803), with no line terminators
Size
2.8 kB (2803 bytes)
Hash
f426cda35f41e4c0b7c30c814b5eb2ee
9f278c5bfbf5ddebc2a4d24e4441efa94dd36be7
037024a96d014cbe884a9f81804ceadc25bd1e49d0d9018de09acddac997afbf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/service-break-f426cda35f41e4c0b7c30c814b5eb2ee.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 2803
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg

20.203.169.150

200 OK

2.3 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2285), with no line terminators
Size
2.3 kB (2285 bytes)
Hash
830ab2367a74a48b4e61ce97be19c0bd
79cde6c94cedde8c6ce414952a6f71841b890b77
6bb27299ef7a2f71792920ae936f4f0800cf1a43ff5f8b4c835233fde4c1e387

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/nemid-830ab2367a74a48b4e61ce97be19c0bd.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 2285
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/translate_24dp.png

20.203.169.150

200 OK

825 B

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/translate_24dp.png
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
825 B (825 bytes)
Hash
55ff382a8b09329e3230a1797eb8f5fd
026ae089006a674da7dcc9bf6b986c5d59e75478
1bb2279aed6bc1438d2b17a5ffcbac9d37864582aedeeec8d301eab162b2c213

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
quad9	Sinkholed

HTTP Headers

GET /nord1/all/translate_24dp.png HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 825
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

www.mitid-approve.20-203-169-150.cprapid.com/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff

20.203.169.150

404 Not Found

315 B

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/b90f1e1b93f3b23dd79e-11eca7aa5a85ec0c6cc3deba794b264e.woff HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 404 Not Found
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.mitid-approve.20-203-169-150.cprapid.com/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff

20.203.169.150

404 Not Found

315 B

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /assets/aa1ee103968475b48934-3a4d9a8b6adf39716f28af71fc9b030a.woff HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 404 Not Found
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg

20.203.169.150

200 OK

2.8 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2846), with no line terminators
Size
2.8 kB (2846 bytes)
Hash
91ca9eec9eed6ed945355d650bb10d41
7178a477a6cc3271d5e2927cd2737af55804f576
8a22f5ea2bc34877a3334b91210c881523678eec1e915cf6a4ee261ba58121b1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/technical-error-91ca9eec9eed6ed945355d650bb10d41.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 2846
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg

20.203.169.150

200 OK

3.1 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3097), with no line terminators
Size
3.1 kB (3097 bytes)
Hash
d0c0f9d25ebde42bbd552c8ad5363f01
97f08f3ee5a37bb5d291cf10fd8e5ce630467522
4f98589b5ad297e797fc12ed5b90a5e9244a17dbc34c5cee66e01ae8c1455d2c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /nord1/all/cancel-d0c0f9d25ebde42bbd552c8ad5363f01.svg HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/login.php
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Fri, 14 May 2021 07:23:30 GMT
Accept-Ranges: bytes
Content-Length: 3097
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/banner.png

20.203.169.150

200 OK

40 kB

URL HTTP/1.1
www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/banner.png
IP
20.203.169.150:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 828 x 300, 4-bit colormap, non-interlaced\012- data
Size
40 kB (40339 bytes)
Hash
6629cb5350d6f3276b2dccc43bd3f397
63d964e5caaa541475a4c2da976871a9f9986067
9fc5b5c44107cfc6701be07fa5d5a4d7ab066607dd7ab6e9f396ac709e28424f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Nordea
quad9	Sinkholed

HTTP Headers

GET /nord1/all/banner.png HTTP/1.1
Host: www.mitid-approve.20-203-169-150.cprapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/nord1/all/styles-90d1ba6c2eef1d8f73fc94069cfe444b.css
Cookie: PHPSESSID=99885fe755d6a84f09802e620e928f09

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Server: Apache
Last-Modified: Sat, 06 Aug 2022 18:35:04 GMT
Accept-Ranges: bytes
Content-Length: 40339
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10487
Expires: Sat, 04 Feb 2023 04:07:23 GMT
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10487
Expires: Sat, 04 Feb 2023 04:07:23 GMT
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10487
Expires: Sat, 04 Feb 2023 04:07:23 GMT
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10487
Expires: Sat, 04 Feb 2023 04:07:23 GMT
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10487
Expires: Sat, 04 Feb 2023 04:07:23 GMT
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14071 bytes)
Hash
9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:05 GMT
age: 12271
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7992 bytes)
Hash
65cd12302c9ca5468dbc9a98155970e0
a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1
8463155faca74f13ec4500fed98289d8bfbdc4a989d1cb7580736018eadf1000

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: ba4f95d9-6081-4b34-955c-bbe8e7b2335c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEjGsdIAMF84w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8083-7666baa66ccdec9b5fec8736;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A3c6sSs_b8KkREPa26a8X9NTEZpHGDjElR9hT-NXwg6dYpeuRNZXfA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
etag: "a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1"
content-type: image/jpeg
age: 10935
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff2

95.100.107.92

200 OK

13 kB

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff2
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 59228, version 1.0 DIY-Thermocam raw data\012- (Lepton 2.x), scale 257-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 9.011994\012- data
Size
13 kB (13051 bytes)
Hash
08875c2c888aa849f2388890d96f9b98
3aaf0fbcb2b3a24dfb90606f2fc50ab3efc69f48
467541bbdbfa14507974a54d3b6fec20fa9c6b1263d1b432847ef81880b93219

HTTP Headers

GET /assets/fonts/IBMPlexSans-Medium.woff2 HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff2
Content-Length: 59228
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "e75c-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14364
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

34.120.237.76

200 OK

9.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.5 kB (9500 bytes)
Hash
3ac51fd6789cbe19c2d484c9022b0e39
bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9
300b5e50cb910f9f4905ee7313d98763b68f85f5874db499cc94469fb14cabfe

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b2d6920-2a79-45a8-b007-d36cc875c52f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9500
x-amzn-requestid: 8fe94388-e8d9-4329-b73a-e9a356df76bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9QEA1IAMF3Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8054-51f954ac4bec16d1055e38f5;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkTJ6wQ4eFYBPDyS0l5vLeWvHHiQIx-cYyFzT4ggHJ8M5Gg3dozFxQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:30:36 GMT
age: 9720
etag: "bcba22a7b7f5dd1f59fffd1027e5d7002cecb6e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9743 bytes)
Hash
518bba9a8770e8ff15229a68be5bddc3
139f944b3f4279e640901f7a6b993f1a49b51a22
0591e73dec2190752677f06525bc993dc8c7a5aa20984a5eda64c323188e2b1d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a517af0-06bb-4ad2-b66e-3627ca6b60a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9743
x-amzn-requestid: b6c1caa9-72e4-476f-9c3d-4a746c410ba3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EHLJoAMF_TA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-1289ef383fbad59621eda6d0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nIp2nUVnamnoTpFwrN1L4K1dqjYvcDGuV2yFqYskkXb14k72AZsjMg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:08:41 GMT
age: 11035
etag: "139f944b3f4279e640901f7a6b993f1a49b51a22"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549d8f22-b421-4fad-867d-64232284ffaf.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8148 bytes)
Hash
9409d3b4b0f8f973d9acab2b744d8dd0
15431d807c3fe818a9b363f1c725c1860e939799
ddde1e1c8faef040370396ccda3a5090e64b63a1bddbe642c128d66849c1caa4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F549d8f22-b421-4fad-867d-64232284ffaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: a9d4782b-b24e-4b72-9994-b9efa680c2fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEOHxIoAMFvUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8081-1d17982c4fe45adf0704f4c4;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VkajXQ1KEbO3T3sVDkH6XLx7pKr5cnHC2QOsR1EvKa7-8WPQrVFbXw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
etag: "15431d807c3fe818a9b363f1c725c1860e939799"
content-type: image/jpeg
age: 10935
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.gstatic.com/images/branding/product/2x/translate_24dp.png

142.250.74.35

200 OK

1.8 kB

URL HTTP/1.1
www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1842 bytes)
Hash
c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

HTTP Headers

GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 1842
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Jan 2023 10:20:27 GMT
Expires: Sun, 28 Jan 2024 10:20:27 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 14 Oct 2021 09:08:00 GMT
Content-Type: image/png
Age: 571929

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
dd3ecc2b0ec33bb211d9dbb65094b1f9
ec9bdb65c44665d6d322d816c051fc5d3fe68527
070627370037a357bed7d1ca8af8ee03bb26b10d8a502aec7daddde951428f67

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:36 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 17:29:19 GMT
Expires: Tue, 07 Feb 2023 17:29:18 GMT
Etag: "ec9bdb65c44665d6d322d816c051fc5d3fe68527"
Cache-Control: max-age=317201,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793f89fcefbd0b31-OSL

ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw

216.58.211.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
2e2ac28df5e696fe1c96317234c6ff3b
05a6204e4e720e064d21421394eed847e9d31b98
0224db9340d590e9225ece2570c849812b600bd09a0e58f2551f42fa6587e6f7

HTTP Headers

POST /s/gts1p5/97q-VzuQ-Mw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 01:12:37 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

whos.amung.us/pingjs/?k=nord11&t=MITiD&c=s&x=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&y=&a=0&d=1.904&v=27&r=9460

104.22.74.171

200 OK

45 B

URL HTTP/1.1
whos.amung.us/pingjs/?k=nord11&t=MITiD&c=s&x=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&y=&a=0&d=1.904&v=27&r=9460
IP
104.22.74.171:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with no line terminators
Size
45 B (45 bytes)
Hash
d2ba9d3b8c0cfdfaa3110d23f8660155
9fe4b1edeebdf8f98cfa1bdf16b6ba9b2337a9bf
b6f79066c19a38733e0eeec7cc854125add141e4bfe24be9c613160c64a0e474

HTTP Headers

GET /pingjs/?k=nord11&t=MITiD&c=s&x=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&y=&a=0&d=1.904&v=27&r=9460 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:37 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793f8a004f802d92-ARN

widgets.amung.us/small.js

172.67.8.141

200 OK

3.8 kB

URL HTTP/2
widgets.amung.us/small.js
IP
172.67.8.141:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
3.8 kB (3766 bytes)
Hash
ea4c511e372e928bc172f7be9f4ec2ab
143afff0f979f7b3cb99bde81287d65224fd47f8
c6f8451006763a8a8c8f7d50570529238f187e28504a5651ad85f70a376e29e9

HTTP Headers

GET /small.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:12:37 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 17:19:30 GMT
etag: W/"63c04122-2170"
expires: Sun, 05 Feb 2023 01:12:36 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 793f89fd3f941c16-OSL
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
f778d551c0863c1a21556c8505894dff
2eeaa5eaa20a00dcd52e5912430d5a0819495c78
6eeff9b51275defc26c45f86df2f82a3cb5cce699667c36437d76daebffd2369

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 01:12:37 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 23:33:41 GMT
Expires: Wed, 08 Feb 2023 23:33:40 GMT
Etag: "2eeaa5eaa20a00dcd52e5912430d5a0819495c78"
Cache-Control: max-age=425462,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793f8a020a0a0b31-OSL

dtsedge.com/ping/?t=0&d=mitid-approve.20-203-169-150.cprapid.com

188.114.97.1

200 OK

279 B

URL HTTP/2
dtsedge.com/ping/?t=0&d=mitid-approve.20-203-169-150.cprapid.com
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
279 B (279 bytes)
Hash
1457bd7257f8f5180972b7cd754047df
c1e690800644a2d5677d0cf142307c90184d308f
a9bb7ac5d68f612bfc8e29a7b3eb76daeae3ece799a81dd92ad0f527ac2b7837

HTTP Headers

GET /ping/?t=0&d=mitid-approve.20-203-169-150.cprapid.com HTTP/1.1
Host: dtsedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:12:37 GMT
content-type: application/javascript
x-t: 0.8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dlkb%2FmlmPWC0SUnYy6y%2F0D75y4msHtEeF54taf3dMdhcNmvZjQ1%2BdEdlZeT5suXta%2BYKrgnBtKnwWGasAWxaQQUxPYhFYijeR%2FpmmlqkjGQ0ibPaFbRpUAOz8eDVyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793f8a025b4d0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.tynt.com/tc.js

104.18.36.173

200 OK

6.7 kB

URL HTTP/2
cdn.tynt.com/tc.js
IP
104.18.36.173:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (647)
Size
6.7 kB (6684 bytes)
Hash
b9634caacb549d84184a80dc49789266
351eee6585f8f85eea954edfe6555973beb6b1fb
af7a6bf911a73bb07bc458e5a4cb7bb93799ee3910268459bfcb31bfa9fa6e0c

HTTP Headers

GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:12:37 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 20:39:00 GMT
vary: Accept-Encoding
etag: W/"63bdcce4-4571"
content-encoding: gzip
cf-cache-status: HIT
age: 72381
expires: Tue, 07 Feb 2023 01:12:37 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 793f8a035b3eb524-OSL
X-Firefox-Spdy: h2

ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&t=MITiD

67.202.105.33

204 No Content

0 B

URL HTTP/2
ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&t=MITiD
IP
67.202.105.33:0
ASN
#32748 STEADFAST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&t=MITiD HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 04 Feb 2023 01:12:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2

de.tynt.com/deb/v2?id=w!nord11&dn=TC&cc=1&r=&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php

67.202.105.33

200 OK

4 B

URL HTTP/2
de.tynt.com/deb/v2?id=w!nord11&dn=TC&cc=1&r=&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php
IP
67.202.105.33:0
ASN
#32748 STEADFAST

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179

HTTP Headers

GET /deb/v2?id=w!nord11&dn=TC&cc=1&r=&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: max-age=86400
expires: Sun, 05 Feb 2023 01:12:38 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Sat, 04 Feb 2023 01:12:37 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2

ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php

67.202.105.33

204 No Content

0 B

URL HTTP/2
ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php
IP
67.202.105.33:0
ASN
#32748 STEADFAST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 04 Feb 2023 01:12:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2

ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php

67.202.105.33

204 No Content

0 B

URL HTTP/2
ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php
IP
67.202.105.33:0
ASN
#32748 STEADFAST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 04 Feb 2023 01:12:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2

ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php

67.202.105.33

204 No Content

0 B

URL HTTP/2
ic.tynt.com/b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php
IP
67.202.105.33:0
ASN
#32748 STEADFAST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /b/p?id=w!nord11&lm=0&ts=1675473190975&dn=TC&iso=0&pu=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 04 Feb 2023 01:12:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13309 bytes)
Hash
f926cd4f39b1a10b152e5959b28ae29e
2b1982d21321071394e363888e007598e968fb35
a51b246a9aa5a2583cae7fd4f0a3bdf73f0b318b7838828d36ea5674a5f26753

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 13309
x-amzn-requestid: f6a3f0f3-d91b-4f4d-8265-0f87742ba5d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyFeBFX4oAMFfpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd82bf-5808ceec265756c702d212dc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:55:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WWjzs8W8GmSAM0-Uc8XBTxz67RJJCIzp3fBYhkoIWZ26UrobmZV8mw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:28:17 GMT
age: 9866
etag: "2b1982d21321071394e363888e007598e968fb35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

t.dtscout.com/i/?l=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&j=

141.101.120.11

200 OK

0 B

URL HTTP/2
t.dtscout.com/i/?l=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&j=
IP
141.101.120.11:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /i/?l=http%3A%2F%2Fwww.mitid-approve.20-203-169-150.cprapid.com%2Fnord1%2Flogin.php&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 04 Feb 2023 01:12:37 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Sat, 04-Feb-2023 02:35:57 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sat, 04-Feb-2023 05:12:37 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1675473157; Domain=dtscout.com; Expires=Mon, 15-May-2023 01:12:37 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.552
expires: Sat, 04 Feb 2023 01:12:36 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AQgWxmH97p38szEW4m90a6ogM%2BzZaudeb%2F%2Bm5Uo%2Bmg%2B0sIZa5uIRMs3wpOOaw1B%2FGrBqW0hfwnmHRtWtrSJhP7MKzU6HCKEoBzIf7mcqhWgaX4g6kq4lT%2FCUYX1U4g4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 793f8a001e322e0d-ARN
content-encoding: br
X-Firefox-Spdy: h2

www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff2

95.100.107.92

200 OK

0 B

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff2
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/fonts/IBMPlexSans-SemiBold.woff2 HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff2
Content-Length: 59692
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "e92c-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14367
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff2

95.100.107.92

200 OK

0 B

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff2
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/fonts/IBMPlexSans-Bold.woff2 HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff2
Content-Length: 55824
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "da10-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14391
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff

95.100.107.92

200 OK

0 B

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-Medium.woff
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/fonts/IBMPlexSans-Medium.woff HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 81900
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "13fec-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14400
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff

95.100.107.92

200 OK

0 B

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-Bold.woff
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/fonts/IBMPlexSans-Bold.woff HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 77160
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "12d68-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14350
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff

95.100.107.92

200 OK

0 B

URL HTTP/1.1
www.mitid.dk/assets/fonts/IBMPlexSans-SemiBold.woff
IP
95.100.107.92:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/fonts/IBMPlexSans-SemiBold.woff HTTP/1.1
Host: www.mitid.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mitid-approve.20-203-169-150.cprapid.com
Connection: keep-alive
Referer: http://www.mitid-approve.20-203-169-150.cprapid.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: font/woff
Content-Length: 82228
Last-Modified: Tue, 18 Oct 2022 12:49:48 GMT
ETag: "14134-5eb4e86f91300"
Accept-Ranges: bytes
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Origin
Cache-Control: public, max-age=14400
Date: Sat, 04 Feb 2023 01:12:36 GMT
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML