Report - fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html

Report Overview

Visited public
2025-03-14 00:17:16
Tags
bankid authentication
URL
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Finishing URL
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
IP / ASN
141.193.213.10
#209242 Cloudflare London, LLC
Title
BankID
Phishing - BankID

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fkjhdsfgkjfssf.wpenginepowered.com	unknown	2020-05-22	2024-10-31	2025-03-13	10 kB	1.7 MB	141.193.213.10
use.typekit.net	494	2010-08-02	2012-07-05	2025-03-12	6.3 kB	3.7 kB	23.33.119.19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-03-13	medium	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html	BankID
2025-03-13	medium	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	BankID

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (71)

	URL	From	Size	First Seen	Last Seen
	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	52 B	2023-03-08	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:55 Last Seen2025-03-14 00:17 Times Seen48 Hash 16cdacae5ea9c96b347f4510b4f720ea 05a2b954383c4763034e730ad4908319f2fd1555 de2ad190fccb7a3914da08e12ce26543a734122f6e671122c9fa4bc62854220e Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	17 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13060 Hash 1e84cdd42eb947313cfabf4500f4c6f2 1649ff34cdea2486ef7db47471a1fcb012e942f1 e2891e42eaf5f98310f3af183b86a9a89f4d7f47a45aefefdd5cfe36e486e275 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	32 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13011 Hash 6e348b50e0bd912399c15d8aa26b43af cc46dcee57b222c9e407a5d055bb6e559029587d 43a7fa33b5f84108bc8c38617a4f57bffd0df6d422517428808df1a8f4997620 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	39 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13012 Hash f4c2465eda6922ff3fea6ba66d147f14 af7b7b826867df9913911732d8a6cdc03b4a9d11 185ac90eabab9e2a96929021be3071dfe7637cd6bc7d96c26d78e66299661123 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	3.4 kB	2023-03-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 07:15 Last Seen2025-03-14 00:17 Times Seen4 Hash 440f05a1bf8bc870756450abc153215c e77889196c068225d57c72c1eefa25d3ca2dec06 ac85517283cc6648b75378e75a53d574a12e98e9e3cb4d0c5086d8fd335d2c3d Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	6 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13061 Hash a5468e7dd67ab27f56294cd340d356a8 4d7d68b3e3f21b07d4ed13da159f8c88950b46ff c3acaffa862000367a294e5ae39999e8c74e3ae9b22ea76287bf0cdcd2393b79 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Function	766 B	2023-04-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 07:08 Last Seen2025-03-14 00:17 Times Seen334 Hash dd87f6004c07e802bf0e6c1a37000a01 7da4d37c098a394e193186bb67a0998f494a21c3 8ddc7f25e0b071457d6e50315ee0e99b8d636a4fd39449e7d291719516a938aa Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	16 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13066 Hash 77525703ec81199de453d7ad6c77cdaa fbcba4dc5364283192653f0add97ac3f61cf7cb4 58f05262a210f4f7fe0cd241e951f6aff84493c65c1e75473858b96cc5f72b48 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	26 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13066 Hash 00e2383df55d4edcce03edc0f4534b85 01ef2f5c6d60634adc7a5f57321f91c58d6bd95d 8ac596d90fbc531a70a72fa5d181a127f7f8f10c92dc4a3ceb997c44cc09a9df Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	374 B	2023-03-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 07:15 Last Seen2025-03-14 00:17 Times Seen4 Hash a60c512c56fd4e3d57a7ea17059eb76a f2264f0f8d2e0ee0399274976e772d7b109b8076 724106e3e0af597b9702d7e244530b85d81913e3c977a0e2dc423ca72c0c647a Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	20 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12991 Hash 43c1748109084cb1dc66b6eac586e531 ab618fb0859189456e6c0ac92a162110efb63058 124d93a4ff250e1f9c048158fec671d427f415761f180b47b5c0c4ecc01e2c30 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	28 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13066 Hash 0709ae56fc7adb374417dfa55c77fc30 d244a52ecb28fcbcd922473617d6abdd1909d2cf 2bfb2624234306da9e2bc9293e3c16a2648259bfd3cf530ba2bacd4959127fcc Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	12 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13063 Hash c40496e8bcbe53650d1b1713c33c84ec e69222c959665f0f847bb4641522a039d5a8a2d1 9999557135a7c9775c8425deef0f3c23bbe15d92837891321fc64fe9ca90b982 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/WebResource.axd	ScriptElement	22 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/WebResource.axd IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-14 00:17 Times Seen145 Hash afe7f8e8ae8f0c4bd8e041b82d8c263a d05df57ce20a98a3bd9b235c3feaa90c44eef1f3 1d1532c6ed3f42083f24c27b1971aa59ef6bfe07b4126d4666f319e43d011054 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	18 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash 86be433ae83665601f218a4f7d0acbae 4acf9d9f7a12e1b36928e87f68379846570529b9 dd3597387478e89716f5d22ca7c495e669d6df6560cda3f23f0a1b03a897103b Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	33 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13012 Hash 8f8d4ebb34474e1f96d889baf35eaf1d bb15bc53e0f592d2da6327f5135cd003021c3dc3 4ae59a97bb35c88e0b946b7e260277c7f56e30d9e3b90d63aa77acf4b497fa43 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.js.download	ScriptElement	248 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.js.download IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-14 00:17 Times Seen518 Hash 273e017fd0bef143258516bdee173a1e b47730ffaec4272a8a01756af2ef13ecea1c4e92 9fcc241093405946885039df428cfa7f0051a1f2bdbcc5a313a177a9e35f8806 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	2.6 kB	2023-04-11	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-11 17:34 Last Seen2025-03-14 00:17 Times Seen4 Hash 3d0e9be744b44e129ea1616e50aec1ef 6765c8f8bf26d3a1261b64eba45da584f3804000 6fd3b31ecf7ad39abd1ab6700e8811806681f8910faed42d34119178870199fd Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	13 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13058 Hash 4fc61ce275ff4e6ad19df9b65d9ef63f 02cbe99829f676d25f985e7939dad66ad1222165 65341e08437d76f12bc1cb7a2c33350de4a76ece1c293c0a4efd6962a6d760c4 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Function	464 B	2023-04-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 07:08 Last Seen2025-03-14 00:17 Times Seen334 Hash 3e179e6f5fd778cb8c1e0e861bd4c62c 6e958c3503fc8d3c37171e65eceda6c8ac016369 44d08c239dad02e30cf0a60392cf0984b84b548a72772f80b7c1923468321598 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Function	506 B	2023-04-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 07:08 Last Seen2025-03-14 00:17 Times Seen334 Hash a6d3a66cc42f9923cefd1f897730bb58 766642cdacc490f161aa72ed36501235108787fa bda051246318e90474057cb58d22f84cb2da8b210a6382cd75b63efbaa05396c Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	17 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13016 Hash 93233746c4592d5e44afedd062a71b67 e545370ff1cb22d5c9c7bca61d3da9e339f31530 45f7623de2eb705e9c8d7f589cab430de56529e5ba99d2dd13e6518dc5d4156d Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	12 B	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-14 00:17 Times Seen431 Hash 29ac875a38d07c6babcbd79d0c39a96f 36a667b08f40d55355cd0e21b03b6c6d880aa848 40c1bcd8cc976bb31a4be40137c6366af05258fe44a2948d44ea693a380bbd43 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/typeKit.js.download	ScriptElement	18 kB	2023-04-11	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/typeKit.js.download IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 17:34 Last Seen2025-03-14 00:17 Times Seen70 Hash d42274146d7dce9a3cd3762afc78e035 633b79daa757bf9cdb852cbd9473b93b0ecb4855 e023ce88e4558cb6cf51ab3aa6b9efa5b1f2a24f191395da5ec20b0e3e708e9e Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	20 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12988 Hash 35d82563006c8eeb426c5e2feced46d4 e79f54552420500047e30c21fb652cb462866e3a 185d74d689cc6a118a526bc696ddf16b11bc64dac4981e5acc217354aed4d4b5 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	36 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12989 Hash f1f59a7ea83955109273b63deabf37e1 94b34be75e8e9c4f1a7240c9582495319f51809d 3a39e7b2a4d44c088496ae26bc9fd35ee91a5d60890ac471a847fd9ee4d4bce1 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	12 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12991 Hash 4bbf90c8db51615867e7d63719a5571b 02563eb3a0e65fca96b9008de9e2881a77f874ec c2c62ef4112f8bac4880180943c3bcec46ba828909719d5839351c8520c2b58b Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource.axd	ScriptElement	358 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource.axd IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03 Last Seen2025-03-14 00:17 Times Seen104 Hash 470ffde37f8c0c1f8811dd3cf6ae1807 e80962d6dc313b50d0e2b22930946c946bbbb5cb 0cfc4a70c37cecef342f0e14a9204008485665202a40ae48a2af09d381554435 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	19 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13061 Hash 2b9df73898c8308496f7c6cd65ac3a16 b2c7f38b83652b7bbf665395a03045349f482abf da9f4519fb8397f1e994c36b18330360e0edad6149c89c974e7eb7057b9e5298 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	15 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13058 Hash 138278e37cc648cb3a98d6822b9037db d7e7e82f83894a6c3674373789c768c26bdf85ca 546792c98263785c495757b1544a26c82f06eb4fbc4d4bd5e6d0cc3702416353 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	20 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13067 Hash a5b02b21b354bedc70fb8a39318e29d2 3a555a8ac99bf6c3707ab154d0e4e1336a9b8116 5ef2603bdd0db0a2c008b7848c9b9f2f592aeb0620caa9ea377a09c0c81e4046 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	14 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13063 Hash 7256eee9a6cb1a8f856109fb7f7f2d5d a6e2fd9b4ac8c8690e25f6e95e8c820e84711944 805cd8e8d73c01887ab546125a87d19c51935a58d3ec45fda7701585269dfa87 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	14 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13067 Hash b364ab4c71c6399641ac7479f42118cd 33fb4bc4f6d6ce24e4aa35c28e839b2a74dd5262 a6f9c4cd1c47e8d7fbf4e1b338dd6f9fcfe9f8993c2a55fe2cfecbe69fb35cc7 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	12 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12989 Hash 5bcef7cbabd6be5f44383e6e58bdc518 8e592f7acdac54a6d0c69353fb936be9d8f35ad7 0a26bb8bd77695f6f3124423c85002219d8ec9ad5273e4203d93910db83602f1 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	123 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:32 Last Seen2025-03-15 01:39 Times Seen11070 Hash 103534bd33032027d4f1961ab5b00d7c bdd367217a02fd4b91bc78c2987cd6b8f56de666 dafaf928c06eb4c2bb6be6ce7ff9de77f70f9c5db2368a0cba55c0f04eb9c06c Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-ui-1.8.17.custom.min.js.download	ScriptElement	211 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-ui-1.8.17.custom.min.js.download IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42 Last Seen2025-03-14 05:03 Times Seen456 Hash 0cd3f4fce2e0fe4a3826df5e2b5cc9bf a4a80afd87d6d3a986defb2741d5b76d18a96125 794bf1ff4b8bbc981cb280b4efeb6e5b040afb34b85f6e3cd2546ace15910301 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	EventHandler	14 B	2023-04-11	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 17:34 Last Seen2025-03-14 00:17 Times Seen75 Hash 47a017b81b3ebd776d3dddb318bbafa6 db9751871be8cda984a995d86b38be6ed205bc75 112723aa823db59389d5cf61e4e28d6fa137930c767e5ea626ba75141eb9ac37 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	17 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13053 Hash 0602b0392fe10b0432b2510f89b4e74a f4e046adb014cbc47772ba727daf4c243e7789f0 c772ff10e0c566e3b1a3b8e773b9efb6fedffa255c093b0906a43a60a7ff1710 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	10 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13060 Hash 1c41a1b99dd39199746f221791a0c5ec 5975fa67d9422197bac5e2ea403864559382a34f a7c37584d1e4a1a1fcd92a3e5872f301104df0a93127f5a3d39e12dcf1ff233e Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	10 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13063 Hash c28d807ca7c0a787568e712d470c6563 ebb38664dbc369c5d8ad217efae13bd5004a277b 4f9556914cf613d8eb2813ddc04a9399041f96126422fa91454442893441e48d Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	18 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash 12cdfc845c18fd2f9035e9c8bb6b06fb cb8b88172ba0edc850b3a3a467e36f55ffbadbdc 26050ae11f4a5ef59bc94c90248ae24cf2ac922baed4e3eeb7470f1705590cbc Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	23 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13063 Hash fe95833a7c6570f71a105b97a0084422 95cbedbc884a3c0926f45e0316ba0132d4d0d2f8 2bb3996dc1dd29534f6eb5b979ccaa121386102d2874992b35e1f7f766224cbf Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Function	685 B	2023-04-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 07:08 Last Seen2025-03-14 00:17 Times Seen334 Hash 4ec59920313c76135393ce8762d50bad b0a8d322db29a49c3b07254a9f8c86da41ece9f1 c29330d5a9db413c5be6a223c7719bff83460664822f08d23fc4282059745904 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	21 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13068 Hash 3e82bc552d98d8a1d2c9590fec8c0da5 b261dec76451e25693cd09b7c8d4ad84e03c43e5 6170fdcda816c255b80ff6a4ab41d1c91271d2fbc1f4c9a7ada8471fdd0da827 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	26 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13062 Hash f6bf3f2ad5b0507b281e7d5bf5255ea5 54ba42373435ba7f6fbd91cff0140992229ea9af 270c2a0f685bbb7d8df1647831f3be82d31d7d97a7b6e58fade34cd54f23ebbb Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	23 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13062 Hash fe48f64736cb93ec5ade9e70b858b69b df8b618e28bd50acb9b8f4c098a0b25ba512a9dc 0a9c626fb8ff84cd97718ccff0677be620abe411e0d8fafe68548e6a5ee7c50e Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	34 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13012 Hash d3d09dec8acbf3262d26a09714be68d8 a81c79311adaa75e8ea2533f7214aa7b66e9882b 58be97a74a739217a2c5e882d0710d8c0a621d384651e898e99f9eaef6cfa97d Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	28 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash 7cf0794147f66e1c5288a14aee870be9 c064682a6e80b9a8cada37fc948dc11701a7d999 e7f450ba4a8166696ed614771c0e785266939dc80d8dc7d5be0724888c488ffb Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	15 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash 6d3c27389a15bace181effdd5a5ef0c7 c5d2432d647de598c44351d71f2ea4315d90311c 410e662b99aa4734f37fd0bf19e51eaf4f5227e1a81bc9ebb6eebfd0f596274f Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource(1).axd	ScriptElement	96 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource(1).axd IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-14 00:17 Times Seen104 Hash 38ef80ec911e31ff9e76d9ddf4a6f94d f261c638f3a2f88b0f2b3ec709fdd73243d34aab 06831185e31b1a87a5b40a61252ab31da46e5517f7899a1697a7ec8674adf5ab Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	32 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13015 Hash 78e1c640832fcc8198d7c32b07080f3a 1a87173187888d8e79586250252eb58e8146d75b ea637d6ab10b4a1245da609dd50ff2b4322e42e0d25e67628cf147783c117f3d Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	31 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13011 Hash afa0dd6bea08794807ddf25c705bef2c 09c8cbb488852b1e52ff0ae99f7025934020738c af2575e18157545585190d5282f19c46a84b07f76051e0a6660332648de1d3d7 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	130 B	2023-03-14	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 18:13 Last Seen2025-03-14 00:17 Times Seen4 Hash 68259d4b3f1594b4e63e6bd8c6d583ee effd68fe18aaf7a6c463f5b110c3403fbce88de1 f47ad3ff8af7e0058130f60e45f558351aff71f12a0e4ab8ee057b4701f23286 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	38 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash ae0eaa09f5b48bf9b1ddc62e2f1410e3 693e1ee25d0e19de4ba9e03b67b4f10247ddfeb9 e526092b476382cc889e2b9cd2f8546076babbbdc3f7c2f728c8787dccf761da Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	25 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13064 Hash 6362428bf42d8f68e1d851fa560a1fdd 32ec2812eb3459a62894627970ab912066cc51b1 06e220fc0636a2c7f0ea45097e5479c2c109dc37d4a5bed14c0b421c4a96eff6 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	20 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13062 Hash 6fb2618dd28dec0f755745bfd06b17ac 26d9df322133ddd0d235daea822903174a7a0673 1b2f26a2cfd895f98fdb2ccb76aa015658ede302c53b59155b8177d43c23ac06 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Function	236 B	2023-04-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 07:08 Last Seen2025-03-14 00:17 Times Seen334 Hash 8d3919b7aa666caa92232956fe800f8f 828411932728b777004bf2d052b4d3451354e7fb 9a6e91fbb5e15888383f82c9d685b67dfac672c2838daa707191c956a218c8a1 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	20 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13030 Hash 631026b10319289c1cc7ac16a38a8fa6 b5f1a42c3e63504c1a727660f0dfaa24d5d20d1d eb726f810af5e00b776a0fcc5ce5e5e41fa390d6d482c2dd7fe29f95cce02bb8 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	13 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13053 Hash bb8bac99f2e593f2baa733ed88de9318 47ce24dd96874b4cd5ecd608aa605beb8d6716db 463797327a56afb41e0df0dbabb9eddcb6742ead712b6a5f080bb9fae1f34695 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	15 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13065 Hash 7209e8ecce6afb1b83884a095754d251 3f036f59daaa070cf683493f90bbb3dd166c2155 33bc2196253a3e20e6fe059f60948b5ee86d84cf5d32a6b99c2a3f420a2f9dad Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	7 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13060 Hash 71aaf1d40d701e9cf82889712149ec5a a6945c9529f285c14a005efa63bbb886238920dd 766767028fc5dcbe8260d78ccc1fec850efb589fcc94081188b23ffc891a3b57 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	13 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13061 Hash bfbd08d74951e52542457f6784638b35 f779be165adf8827cd0598b99194a2dae9ccc9ff 07d4a7e030bf71800db7e7b71997259e273ab034fc252811418800517a2548fd Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	31 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13063 Hash cf5264e5b858dcea026ec61bee0e6480 0dc15cc2ae1a6d1ee57e925adbacad0ae3fdb5cf 8015a229810f6ee0fe587f91245adc20a13decaed196a2e62c86159c8fef56b5 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	ScriptElement	208 B	2023-03-12	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 07:15 Last Seen2025-03-14 00:17 Times Seen4 Hash e41406a64468c58b5f6796783dbceefd 68c191bcaf755fdbffe09724cd724f43c89966a2 5bb3eb901ae8006268c874bd8d1fa3c9bf326e75663d6fc073f0ea987e95f2af Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	33 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen12988 Hash e76ebefdf7180a307d86918da7f8d704 88ff601d929832ae2b3a1a6492891079bd09be46 38961dd7e08c313889867662b9b3443116eee13078f1299557125d9734a48da8 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	23 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:10 Last Seen2025-03-15 01:39 Times Seen13663 Hash 1d7f3e2489aee059a399958d518d739e b72c3f666e1aa3ea2444cc70ab6b23e34c266474 9047939faed531920e299a9aeab2167e7491ecdaff4f7f77212472a2b36035d7 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	21 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13047 Hash e0da7e6b0ddbc962be250d04e01408ca 88bc8d65399f86f33aae72655fed4ef9afd9b93c 5fc56c8217bc64ad868067805d54b49033baf29625a80c23075629c6cb6b601f Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.min.js.download	ScriptElement	94 kB	2023-03-07	2025-03-14
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.min.js.download IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-03-14 22:58 Times Seen6452 Hash ddb84c1587287b2df08966081ef063bf 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	15 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13041 Hash 835ca7926fe781c881942f67f5bb78c7 9cec3a6a31ab1e336f0b92509aabc8e37abf34ad 967e0b17732c146f40c3e698dc57ebb6158e764c808a5a6ee8138f186299c856 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	17 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13054 Hash 0bb34532b9ca18993931cb93bc868cf1 bc53fb64973f235776b1ee2778982633bf464ed7 e1aa39f3b4a4da6e078bb9893bff6333898242200694118a2b7402afdd267a54 Loading...

	fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html	Eval	22 B	2023-03-07	2025-03-15
Pretty URL fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html IP 141.193.213.10 ASN #209242 Cloudflare London, LLC Introduced by eval Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-03-15 01:39 Times Seen13012 Hash efe6c34a6616337fde0ebc78ed1ba668 a28aa61481aa14a9cfd41692f61ad230fb31c4b6 33ee5648d0ee69ce9a53c756ba69a3858fd5126c04809f4979d89ebdbd167640 Loading...

HTTP Transactions (29)

URL IP Response Size

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg

141.193.213.10

200 OK

2.0 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (1974 bytes)
Hash
ba545aa856a3b25e02d8d43adf58f93e
9aaf5f6690fc0eb966f976b869bd1b2a52d29b74
73d0449291840c0e4f6c44a2a1a6f5bcf373db1be85b192febf2242ca2ce5e23

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/logo2.svg HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-7b6"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 24947
server: cloudflare
cf-ray: 91ff95c25a82ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/7505b0/0000000000000000000124fa/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/7505b0/0000000000000000000124fa/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/7505b0/0000000000000000000124fa/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:56 GMT
akamai-grn: 0.0f772117.1741911415.eb7ad9e
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg

141.193.213.10

200 OK

2.0 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (1974 bytes)
Hash
ba545aa856a3b25e02d8d43adf58f93e
9aaf5f6690fc0eb966f976b869bd1b2a52d29b74
73d0449291840c0e4f6c44a2a1a6f5bcf373db1be85b192febf2242ca2ce5e23

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/logo2.svg HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-7b6"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 24960
server: cloudflare
cf-ray: 91ff9614b85fecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.min.js.download

141.193.213.10

200 OK

94 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.min.js.download
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ISO-8859 text, with very long lines (32769)
Size
94 kB (93868 bytes)
Hash
7f88006f7f3015cda4771c59c331045d
8b16adb7a833858fd585c5b752d19af446608567
50e56da1d578290bb0ea70122bed96c6c9b62fd6b0648b27038c552a791cfee7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.min.js.download HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 93868
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-16eac"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c25a6cecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/7505b0/0000000000000000000124fa/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/7505b0/0000000000000000000124fa/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/7505b0/0000000000000000000124fa/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:55 GMT
akamai-grn: 0.0f772117.1741911415.eb7ad1b
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html

141.193.213.10

200 OK

22 kB

URL User Request GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
PHP script, ASCII text, with very long lines (12394), with CRLF line terminators
Size
22 kB (21529 bytes)
Hash
ed27906904f26138e786a9286c8f5af5
df97146f7ddf3a46b85de679782df194490572cc
8cc4d0a726244f610f630f04130c7a2bc1678421e3e250a5339755d0f6f300f5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID
OpenPhish	phishing	BankID

HTTP Headers

GET /on/vipps/personal.html HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 5
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff96132e07ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/typeKit.js.download

141.193.213.10

200 OK

18 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/typeKit.js.download
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ISO-8859 text, with very long lines (2107), with CRLF line terminators
Size
18 kB (17944 bytes)
Hash
d284850f9f95337348447a6918814f0f
b4847fcc2f7b6f18c05c4576411a1111e6c72b2b
6d7e5592901e4818e076e23ec87698f3f45a76117eee613f2cd555f04979bedc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/typeKit.js.download HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 17944
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-4618"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c24a63ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/gif/1.gif

141.193.213.10

200 OK

383 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/gif/1.gif
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
GIF image data, version 89a, 800 x 800
Size
383 kB (382631 bytes)
Hash
174ce56bcb4b601dc5225f53a91a4e85
972fd51458ba0655adac8f7c20d6873208830411
0037451c548deeae3a0798954a6458a89f53ed207e7799bbe53cb249e3ca831e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/gif/1.gif HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: image/webp
content-length: 382631
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=786671
content-disposition: inline; filename="1.webp"
etag: "6480b906-c00ef"
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
vary: Accept
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 91ff95c2baf6ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/common_auth.css

141.193.213.10

200 OK

8.9 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/common_auth.css
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
ASCII text, with very long lines (9825), with no line terminators
Size
8.9 kB (8912 bytes)
Hash
95d0b3be971d3df480e949a9d022296d
246262ea57cc8302f2653dd5ef2901d7706e02d6
a62565a3ada3de21876ec42e8f4c348e33625340158a5aadf759309b44dd4edd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/src/common_auth.css HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-22d0"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 48
server: cloudflare
cf-ray: 91ff9614a856ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/7505b0/0000000000000000000124fa/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/7505b0/0000000000000000000124fa/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/7505b0/0000000000000000000124fa/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:55 GMT
akamai-grn: 0.0f772117.1741911415.eb7ac54
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/bidm.css

141.193.213.10

200 OK

43 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/bidm.css
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
ASCII text, with very long lines (1222), with CRLF line terminators
Size
43 kB (42882 bytes)
Hash
15ad390e981075722abd9aed7225e85f
1a6eae25e0a2d52cb6b8bf7fa97367bd985a58f7
31412635ed02fd2c9a9ac4c4d9093c0601a687cfe305aba0dea75c1943d7dd72

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/src/bidm.css HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-a782"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 48
server: cloudflare
cf-ray: 91ff9614a857ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html

141.193.213.10

200 OK

41 kB

URL User Request GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type

Size
41 kB (41182 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID
OpenPhish	phishing	BankID

HTTP Headers

GET /on/vipps/wai1.html HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:53 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 4
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95bf7ea9ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:56 GMT
akamai-grn: 0.0f772117.1741911416.eb7aec0
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:55 GMT
akamai-grn: 0.0f772117.1741911415.eb7ad0e
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:55 GMT
akamai-grn: 0.0f772117.1741911415.eb7ad8e
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo1.png

141.193.213.10

200 OK

6.2 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo1.png
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
RIFF (little-endian) data, Web/P image
Size
6.2 kB (6210 bytes)
Hash
4ddc08dc4c1b8ffe9678ff61b9ca4a3e
800e45ce0663094f71eca95a464724deac2ebaff
ccffb14d5cdafc55443b9e8e7ca4c27b587fc7bf98eee16c2ab442d4d3727bf0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/logo1.png HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: image/webp
content-length: 6210
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=11908
content-disposition: inline; filename="logo1.webp"
etag: "6480b906-2e84"
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
vary: Accept
cf-cache-status: HIT
age: 48
accept-ranges: bytes
server: cloudflare
cf-ray: 91ff9614a85decdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/main.css

141.193.213.10

200 OK

22 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/main.css
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type

Size
22 kB (22401 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/main.css HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-5781"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 26
server: cloudflare
cf-ray: 91ff95c24a66ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-ui-1.8.17.custom.min.js.download

141.193.213.10

200 OK

211 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-ui-1.8.17.custom.min.js.download
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ASCII text, with very long lines (18557)
Size
211 kB (210902 bytes)
Hash
0cd3f4fce2e0fe4a3826df5e2b5cc9bf
a4a80afd87d6d3a986defb2741d5b76d18a96125
794bf1ff4b8bbc981cb280b4efeb6e5b040afb34b85f6e3cd2546ace15910301

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/jquery-ui-1.8.17.custom.min.js.download HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 210902
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-337d6"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c25a70ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource(1).axd

141.193.213.10

200 OK

96 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource(1).axd
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
96 kB (95640 bytes)
Hash
38ef80ec911e31ff9e76d9ddf4a6f94d
f261c638f3a2f88b0f2b3ec709fdd73243d34aab
06831185e31b1a87a5b40a61252ab31da46e5517f7899a1697a7ec8674adf5ab

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource(1).axd HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 95640
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-17598"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c25a78ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg

141.193.213.10

200 OK

2.0 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/logo2.svg
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (1974 bytes)
Hash
ba545aa856a3b25e02d8d43adf58f93e
9aaf5f6690fc0eb966f976b869bd1b2a52d29b74
73d0449291840c0e4f6c44a2a1a6f5bcf373db1be85b192febf2242ca2ce5e23

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/logo2.svg HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-7b6"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 24960
server: cloudflare
cf-ray: 91ff96167ad5ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.js.download

141.193.213.10

200 OK

248 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.js.download
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ASCII text
Size
248 kB (248235 bytes)
Hash
273e017fd0bef143258516bdee173a1e
b47730ffaec4272a8a01756af2ef13ecea1c4e92
9fcc241093405946885039df428cfa7f0051a1f2bdbcc5a313a177a9e35f8806

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/jquery-1.7.1.js.download HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 248235
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-3c9ab"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c24a68ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/WebResource.axd

141.193.213.10

200 OK

22 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/WebResource.axd
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
22 kB (22346 bytes)
Hash
afe7f8e8ae8f0c4bd8e041b82d8c263a
d05df57ce20a98a3bd9b235c3feaa90c44eef1f3
1d1532c6ed3f42083f24c27b1971aa59ef6bfe07b4126d4666f319e43d011054

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/WebResource.axd HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 22346
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-574a"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c25a71ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource.axd

141.193.213.10

200 OK

358 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource.axd
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
JavaScript source, ASCII text, with very long lines (658), with CRLF line terminators
Size
358 kB (357825 bytes)
Hash
470ffde37f8c0c1f8811dd3cf6ae1807
e80962d6dc313b50d0e2b22930946c946bbbb5cb
0cfc4a70c37cecef342f0e14a9204008485665202a40ae48a2af09d381554435

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/ScriptResource.axd HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: application/octet-stream
content-length: 357825
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: "6480b906-575c1"
x-cacheable: SHORT
vary: Accept-Encoding,Cookie
cache-control: max-age=600, must-revalidate
accept-ranges: bytes
x-cache: HIT: 8
x-cache-group: normal
x-orig-cache-control: max-age=600, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91ff95c25a73ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:56 GMT
akamai-grn: 0.0f772117.1741911416.eb7ae32
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:56 GMT
akamai-grn: 0.0f772117.1741911416.eb7b07d
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/3625.css

141.193.213.10

200 OK

3.9 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/src/3625.css
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type
ASCII text, with very long lines (4169), with no line terminators
Size
3.9 kB (3940 bytes)
Hash
06ad0e0892b887104c917b42e4d452a4
39397783c3659aacf0fca7684b87f15e6859b74c
63cbd11b153b23dba6b861a500cbf8c58d8cbb249fe56a2c77a0f1bcd3cd6059

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/src/3625.css HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/personal.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:17:07 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-f64"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 48
server: cloudflare
cf-ray: 91ff9614a858ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/bootstrap.css

141.193.213.10

200 OK

153 kB

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/Seleccione%20medio%20de%20pago_files/bootstrap.css
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type

Size
153 kB (152770 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /on/vipps/Seleccione%20medio%20de%20pago_files/bootstrap.css HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:54 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 07 Jun 2023 17:06:14 GMT
etag: W/"6480b906-254c2"
cache-control: public, max-age=31536000
access-control-allow-origin: *
cf-cache-status: HIT
age: 26
server: cloudflare
cf-ray: 91ff95c24a65ecdc-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

use.typekit.net/af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D

23.33.119.19

404 Not Found

9 B

URL GET
use.typekit.net/af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D
IP
23.33.119.19:443
ASN
#20940 Akamai International B.V.

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
FingerprintF3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89
ValidityTue, 10 Dec 2024 00:00:00 GMT - Sat, 10 Jan 2026 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

GET /af/802da8/0000000000000000000124f9/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&token=yjzt92fIDu%2Bi2yE%2FC%2FROvpoHRueJpI3lKQz6Qi7aWTw%3D HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fkjhdsfgkjfssf.wpenginepowered.com
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
content-type: text/plain;charset=utf-8
content-length: 9
x-cascade: pass
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: no-cache
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
date: Fri, 14 Mar 2025 00:16:55 GMT
akamai-grn: 0.0f772117.1741911415.eb7ac53
X-Firefox-Spdy: h2

fkjhdsfgkjfssf.wpenginepowered.com/favicon.ico

141.193.213.10

200 OK

0 B

URL GET
fkjhdsfgkjfssf.wpenginepowered.com/favicon.ico
IP
141.193.213.10:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Certificate
IssuerLet's Encrypt
Subjectwpenginepowered.com
Fingerprint49:E1:15:80:DC:C5:37:63:13:3F:4C:0F:7B:1A:1E:D5:92:31:D2:F3
ValidityTue, 14 Jan 2025 12:49:31 GMT - Mon, 14 Apr 2025 12:49:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - BankID

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fkjhdsfgkjfssf.wpenginepowered.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fkjhdsfgkjfssf.wpenginepowered.com/on/vipps/wai1.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 00:16:55 GMT
content-type: image/x-icon
content-length: 0
last-modified: Tue, 11 Mar 2025 18:44:40 GMT
etag: "67d08498-0"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 26
accept-ranges: bytes
server: cloudflare
cf-ray: 91ff95ca0e56ecdc-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (71)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML