Report - verenacrow.at/images/weapon

Report Overview

Submitted URL
verenacrow.at/images/weapon
IP
213.145.225.120
ASN
#25575 Ledl.net GmbH
Submitted
2022-09-11 11:13:42
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.33.119.27
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.69.181.45
www.verenacrow.at	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	177 kB	213.145.225.120
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	59 kB	34.120.237.76
verenacrow.at	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	346 B	505 B	213.145.225.120
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.27
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.49
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	823 B	12 kB	104.17.24.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-11	medium	verenacrow.at/images/weapon	Phishing
2022-09-11	medium	www.verenacrow.at/plugins/system/jce/css/content.css?badb4208be409b1335b815dde676300e	Phishing
2022-09-11	medium	www.verenacrow.at/modules/mod_djmegamenu/assets/css/offcanvas.min.css?4.3.6.pro	Phishing
2022-09-11	medium	www.verenacrow.at/modules/mod_djmegamenu/mobilethemes/dark/djmobilemenu.css?4.3.6.pro	Phishing
2022-09-11	medium	www.verenacrow.at/media/vendor/jquery/js/jquery.min.js?3.6.0	Phishing
2022-09-11	medium	www.verenacrow.at/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288	Phishing
2022-09-11	medium	www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro	Phishing
2022-09-11	medium	www.verenacrow.at/templates/verenacrow/js/cookie.js	Phishing
2022-09-11	medium	www.verenacrow.at/templates/verenacrow/js/bootstrap.js	Phishing
2022-09-11	medium	www.verenacrow.at/templates/verenacrow/js/jquery-3.6.0.min.js	Phishing
2022-09-11	medium	www.verenacrow.at/seite-nicht-gefunden	Phishing
2022-09-11	medium	www.verenacrow.at/images/weapon	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmobilemenu.min.js?4.3.6.pro	9.0 kB	2023-03-07	2024-03-20
Pretty URL www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmobilemenu.min.js?4.3.6.pro IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:44:15 Last Seen2024-03-20 16:01:21 Times Seen17 Hash 810fe5237f2f423e8af8d58bf7222d68 1ee12f4d911cb8fcd01a75f2100d6e5b037df0df 96cd2d644d6b52837f0c5c6ce9a8cdf9001596dcc34d37f64615a71c38bf0d1d Loading...

	www.verenacrow.at/templates/verenacrow/js/cookie.js	20 kB	2023-03-07	2024-04-24
Pretty URL www.verenacrow.at/templates/verenacrow/js/cookie.js IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:45 Last Seen2024-04-24 01:33:10 Times Seen5457 Hash f2bc0804920974cdb94feca2936b668c 253b288316ee7bb62b0bc755d7834b14b265f18c af4c6683814aa527caf53bde3d021e6aafe00833b45f2dead043c87ed7864674 Loading...

	unknown	0 B	2023-03-07	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 03:55:19 Times Seen37053579 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.verenacrow.at/templates/verenacrow/js/jquery-3.6.0.min.js	16 kB	2023-03-07	2023-03-13
Pretty URL www.verenacrow.at/templates/verenacrow/js/jquery-3.6.0.min.js IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:44:15 Last Seen2023-03-13 17:42:59 Times Seen1 Hash 202d1cc5de9d239370b7652cca0a219d 7f2bf1535338a759ef4ced1bab22472baa013e7d 2a442caa39422a79aae6fd13bfdfd5a2cb6c41bd89b1c22aca207e6d1b63c94f Loading...

	www.verenacrow.at/media/vendor/jquery/js/jquery.min.js?3.6.0	90 kB	2023-03-07	2024-04-25
Pretty URL www.verenacrow.at/media/vendor/jquery/js/jquery.min.js?3.6.0 IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 03:36:03 Times Seen261087 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	www.verenacrow.at/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288	26 B	2023-03-07	2024-04-11
Pretty URL www.verenacrow.at/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288 IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:47 Last Seen2024-04-11 15:23:23 Times Seen613 Hash 4784e5a3120a814edde6c6088aa30964 04499b98c0305b16b373dff09fe79d1290976288 47084350921ff4f9e4908afef36723b84de4247eaf51c403950638b9126c8f4b Loading...

	www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro	14 kB	2023-03-07	2024-03-20
Pretty URL www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro IP 213.145.225.120 ASN #25575 Ledl.net GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:44:15 Last Seen2024-03-20 16:01:21 Times Seen34 Hash dcf69266d826a6d9a4e9c5c399a8ad04 cf8ab45a7af185f9b7d4a7610d0694cc852faaee defe8d895cde241a3fbd0acd3d591096fc5b53f8929204079605e7a86c788828 Loading...

HTTP Transactions (42)

URL IP Response Size

verenacrow.at/images/weapon

213.145.225.120

301 Moved Permanently

247 B

URL HTTP/1.1
verenacrow.at/images/weapon
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
247 B (247 bytes)
Hash
15265938024dac7c0b278beabcd7570f
8c6c798b7d3ac582932b4695216f8c39446998bc
f5e9fa1fbb82d0832a0c616448bd9f3c18424560de46a0e6937454a9106b2682

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/weapon HTTP/1.1
Host: verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Sun, 11 Sep 2022 11:13:31 GMT
Server: Apache
Location: https://www.verenacrow.at/images/weapon
Content-Length: 247
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

firefox.settings.services.mozilla.com/v1/

143.204.55.27

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 11:07:35 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _KxDceS0ITUjQcQIce-1jCwehS-cWOzHYbKcKgWBTwdbLL1zQUpByg==
Age: 357

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18604
Expires: Sun, 11 Sep 2022 16:23:36 GMT
Date: Sun, 11 Sep 2022 11:13:32 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.49

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.49:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cSUucKumYKOCUeWHrzKHnGP1SDpRfBzc56OMO4YIo3VvW2WGQ2uuxQ==
age: 14180
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 11:13:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8d0cad51fa957abedaa961368f9653fb
a12435abb0ba6095ca500811782a1146f76612c5
dcdf8588dde6ca20e307af22ccfb94d0bd7e60ef1d1b2ae64ff19ef143d92a4e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DCDF8588DDE6CA20E307AF22CCFB94D0BD7E60EF1D1B2AE64FF19EF143D92A4E"
Last-Modified: Fri, 09 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 11 Sep 2022 17:13:32 GMT
Date: Sun, 11 Sep 2022 11:13:32 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.27

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 11 Sep 2022 10:56:07 GMT
Expires: Sun, 11 Sep 2022 11:24:03 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ls9HUyctF6_Su50ruO53G1IdHU5Mt6i55D83UL-FYMKZI_PLsGChKg==
Age: 1045

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
26e829ba5f754918e20cbd316dc4348e
ba198501da0812dd11ca3b38a51325b5de6cfa60
4352c25d4af7637a8435b0df6d042fc606d37a348e966b99fecce8a853b8ebc0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6468
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 11:13:32 GMT
Last-Modified: Sun, 11 Sep 2022 09:25:44 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.69.181.45

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.69.181.45:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YpjDQogQo2D6HeSB8g3B2g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lpp5OY1A5Y5SqCAH0R557QpuvF0=

cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.compat.min.css

104.17.24.14

200 OK

4.2 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.compat.min.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65348)
Size
4.2 kB (4202 bytes)
Hash
fa7fa3165499223a916cc2be5401943f
f00186873124db1817de2243fee2d99d06b7e161
a8912a656b8bccd73c3f8eb333183e6ffda146822da4af0c7e3b1e3c1efa4609

HTTP Headers

GET /ajax/libs/animate.css/4.1.1/animate.compat.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 11 Sep 2022 11:13:33 GMT
content-type: text/css; charset=utf-8
content-length: 4202
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f5628a3-113a1"
last-modified: Mon, 07 Sep 2020 12:33:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2745790
expires: Fri, 01 Sep 2023 11:13:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NdOpMweB9X1UZBSCG1qzmnFg4Y3%2BL1fncWczipNY4RAtZkIqwLaQ%2Fp6q%2BAzO4NTpUeLlxTJDSKGSZx94xK1TmjknPUQL4adGLLFds3lJNFVnAyYG9AoAT1ajCdz0x5nd30uzZEQy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748ff9872f93b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.24.14

200 OK

5.6 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
109d1ed85cd01f9cdab73a4cac5bf80d
d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 11 Sep 2022 11:13:33 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 721370
expires: Fri, 01 Sep 2023 11:13:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kdDJYHzVwsqLTk1L9%2FOyhoHezW6ORBf6Nv32%2BNOUocNUo0%2FVLI1ypUgygZTwx%2F%2F2UgXeNXzmtgZHmAEvXkzSp2YSayvb6PKRpsJY6C%2B0Kn71a3INyv4M8bxMDFGSniDZ6QyLFm3y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748ff9872faab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.verenacrow.at/plugins/system/jce/css/content.css?badb4208be409b1335b815dde676300e

213.145.225.120

200 OK

1.1 kB

URL HTTP/2
www.verenacrow.at/plugins/system/jce/css/content.css?badb4208be409b1335b815dde676300e
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (8234), with no line terminators
Size
1.1 kB (1076 bytes)
Hash
4435c8e27e842b79e3c118e423ade935
55de87b5c773b8a18e70bdfeb98747e24cc05b1c
12edf47973b2c24f31c2df47fbaa44b42351bc5da28ccf6e2e31d904c21c8115

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /plugins/system/jce/css/content.css?badb4208be409b1335b815dde676300e HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "202a-5e552accbdf5a-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1076
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/modules/mod_djmegamenu/assets/css/offcanvas.min.css?4.3.6.pro

213.145.225.120

200 OK

1.1 kB

URL HTTP/2
www.verenacrow.at/modules/mod_djmegamenu/assets/css/offcanvas.min.css?4.3.6.pro
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (11041), with no line terminators
Size
1.1 kB (1112 bytes)
Hash
7b1dae931b34406ad7244f4f3c56d51f
0a18426ce082c7d1bbbbe75f33b67433f9b70ddc
426b20e22fab8c71b7147f669c8c0d5d2758d9477158bc111d79a2d9fb04268b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /modules/mod_djmegamenu/assets/css/offcanvas.min.css?4.3.6.pro HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "2b21-5e552acc6de17-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1112
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/modules/mod_djmegamenu/mobilethemes/dark/djmobilemenu.css?4.3.6.pro

213.145.225.120

200 OK

2.3 kB

URL HTTP/2
www.verenacrow.at/modules/mod_djmegamenu/mobilethemes/dark/djmobilemenu.css?4.3.6.pro
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with CRLF line terminators
Size
2.3 kB (2317 bytes)
Hash
963342604ca4d1a26447c31c0dfd865a
583f97ad70f5cd00c33b7bc5a6debf9408e93a50
601bf340f7846adec2d37097ecf7a8980741e17af4c282713555e294d64644bf

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /modules/mod_djmegamenu/mobilethemes/dark/djmobilemenu.css?4.3.6.pro HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "30cf-5e552acc7d818-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2317
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/modules/mod_djmegamenu/assets/css/theme_override.min.css?4.3.6.pro

213.145.225.120

200 OK

270 B

URL HTTP/2
www.verenacrow.at/modules/mod_djmegamenu/assets/css/theme_override.min.css?4.3.6.pro
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (1044), with no line terminators
Size
270 B (270 bytes)
Hash
9f571a855ea9385a10967357db132ed9
7cb894b07fe69a2f72eafdd0d736a843efb87b22
5d3b7f180ab67fa0d36174598d7ab7d10e853bb3189ec937475f8f0a49a4fea6

HTTP Headers

GET /modules/mod_djmegamenu/assets/css/theme_override.min.css?4.3.6.pro HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "414-5e552acc6ce77-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 270
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/media/vendor/jquery/js/jquery.min.js?3.6.0

213.145.225.120

200 OK

31 kB

URL HTTP/2
www.verenacrow.at/media/vendor/jquery/js/jquery.min.js?3.6.0
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
ca6e0dcaf6fe11e3b4d4d299ecbab7a6
a637b13aff3baacc733eb221226c36b71a3d3a7b
f4a93cf3834c5f3bbbab2ba619425fb1415050a847f5bc12cd6b0bab5e68074e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /media/vendor/jquery/js/jquery.min.js?3.6.0 HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
vary: Accept-encoding
last-modified: Wed, 03 Aug 2022 09:15:24 GMT
etag: "789b-5e552ac4931e7"
accept-ranges: bytes
content-length: 30875
content-encoding: gzip
content-type: text/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288

213.145.225.120

200 OK

46 B

URL HTTP/2
www.verenacrow.at/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with no line terminators
Size
46 B (46 bytes)
Hash
2811b89917802e96cdaba9fde4657fcc
3edd2962563e8cf5e72e73de5af9b3299eb3fb43
8685ee936b592b0ae3d1108487f64d8bf5119b84bb9cea50251c3652f9a20139

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288 HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
vary: Accept-encoding
last-modified: Wed, 03 Aug 2022 09:15:23 GMT
etag: "2e-5e552ac41a063"
accept-ranges: bytes
content-length: 46
content-encoding: gzip
content-type: text/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro

213.145.225.120

200 OK

3.8 kB

URL HTTP/2
www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (14315), with no line terminators
Size
3.8 kB (3819 bytes)
Hash
2ce1d843b9eda733d06a27bdfc0ad09a
9d861dd296fac2760d033bb48d7773911828d644
2035be256cd70c0a1d19dd0c6fc8a3bc9457a06216be5131ceb8f172108cb927

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /modules/mod_djmegamenu/assets/js/jquery.djmegamenu.min.js?4.3.6.pro HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "37eb-5e552acc6bed7-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3819
content-type: application/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmobilemenu.min.js?4.3.6.pro

213.145.225.120

200 OK

2.7 kB

URL HTTP/2
www.verenacrow.at/modules/mod_djmegamenu/assets/js/jquery.djmobilemenu.min.js?4.3.6.pro
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (9012), with no line terminators
Size
2.7 kB (2704 bytes)
Hash
6d2c925fae8dc9d7618e0ee7930b6ec8
c4215850a68f49e9542cd3dcf3dab01657cc3df1
c6d0c3fc960d30fe8ee145c5222a850328c157086144bf8cb5c7e2da8c75dd48

HTTP Headers

GET /modules/mod_djmegamenu/assets/js/jquery.djmobilemenu.min.js?4.3.6.pro HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "2334-5e552acc6bed7-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2704
content-type: application/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/css/style.css

213.145.225.120

200 OK

989 B

URL HTTP/2
www.verenacrow.at/templates/verenacrow/css/style.css
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (305)
Size
989 B (989 bytes)
Hash
9b55cc4b24d95ae65c7376b1ec416b31
ece76c9d9b809ed87b1cf9ec3a4b48a493167db5
4b41a70e0f3f047b2c8c087e79a010ca298959808a0db7ea692958dd5e969dde

HTTP Headers

GET /templates/verenacrow/css/style.css HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "a4e-5e552acc52896-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 989
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/css/bootstrap.css

213.145.225.120

200 OK

25 kB

URL HTTP/2
www.verenacrow.at/templates/verenacrow/css/bootstrap.css
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
Unicode text, UTF-8 text, with very long lines (560)
Size
25 kB (25276 bytes)
Hash
3ba9f834840a111a3bb944e80a5ffea0
33bdd4db93144e21b8dfea2d02fe714bdc232e00
0877e6e2a085b0635a59dc2aa8772c9d45ca88f1c4677f028651d596dd706f4c

HTTP Headers

GET /templates/verenacrow/css/bootstrap.css HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "2fcfc-5e552acc518f6-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 25276
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/css/cookie.css

213.145.225.120

200 OK

1.2 kB

URL HTTP/2
www.verenacrow.at/templates/verenacrow/css/cookie.css
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text
Size
1.2 kB (1222 bytes)
Hash
856975d8d44ef0843fbaa6497ee8b4be
4f8045c5089bd2ffc3ad3aa62b9c4490f34b5dc0
b051854040a860cc07d316ede99f4ba4caa52445e5b8136f6cd6a75dd4d67240

HTTP Headers

GET /templates/verenacrow/css/cookie.css HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "11b4-5e552acc52896-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1222
content-type: text/css
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/js/cookie.js

213.145.225.120

200 OK

6.5 kB

URL HTTP/2
www.verenacrow.at/templates/verenacrow/js/cookie.js
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (19802), with no line terminators
Size
6.5 kB (6510 bytes)
Hash
6e5778730e700811a944ffb52b2889ba
67221c2e1d5ffedb326e8979ef85adc1524a844f
2b3bfe41d5195287f5b37005f02c30d2dc3b4583e4b69da3ceb27489be8daeed

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /templates/verenacrow/js/cookie.js HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "4d5a-5e552acc4ab96-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6510
content-type: application/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/images/logo.png

213.145.225.120

200 OK

6.0 kB

URL HTTP/2
www.verenacrow.at/images/logo.png
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
PNG image data, 720 x 88, 8-bit/color RGBA, non-interlaced\012- data
Size
6.0 kB (5977 bytes)
Hash
541238b61c3b2bbc7e058b39e544bec5
56f9566d3539e559f84c9f5887823ac31602d712
2feeda2294bb9bc8ba039726ea7d67d9d4c7aff6ec9627880e6ec5dfc2fa236c

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:26 GMT
etag: "1759-5e552ac666e5a"
accept-ranges: bytes
content-length: 5977
content-type: image/png
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/images/menu/malerei.png

213.145.225.120

200 OK

9.3 kB

URL HTTP/2
www.verenacrow.at/images/menu/malerei.png
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
PNG image data, 95 x 62, 8-bit/color RGBA, non-interlaced\012- data
Size
9.3 kB (9278 bytes)
Hash
b22616736a7804c20a07e44d104b0d03
c95362d3891ccaca12b372d45ba0a412225ca973
28c8e7839c98902f154f6c4011b47b0abce1e0f7be0dacc366df1a86f627b395

HTTP Headers

GET /images/menu/malerei.png HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:26 GMT
etag: "243e-5e552ac66bc7a"
accept-ranges: bytes
content-length: 9278
content-type: image/png
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/images/menu/ueber-mich.png

213.145.225.120

200 OK

9.5 kB

URL HTTP/2
www.verenacrow.at/images/menu/ueber-mich.png
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
PNG image data, 95 x 62, 8-bit/color RGBA, non-interlaced\012- data
Size
9.5 kB (9494 bytes)
Hash
4dc8194ecfc01007fd6c2258e25649d0
ff65d232f5e561a46050777e8b19dbd4e82f6754
a235507a958ac4df645c98bf72b59ef786cc5964c1a520021fd439a4e9c67d0c

HTTP Headers

GET /images/menu/ueber-mich.png HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:26 GMT
etag: "2516-5e552ac66bc7a"
accept-ranges: bytes
content-length: 9494
content-type: image/png
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/js/bootstrap.js

213.145.225.120

200 OK

28 kB

URL HTTP/2
www.verenacrow.at/templates/verenacrow/js/bootstrap.js
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
ASCII text, with very long lines (620)
Size
28 kB (28103 bytes)
Hash
fef5b878a6baa2d77dea01f9261dea26
39d17965d992b89753f87faa817611e77ee70fd4
027c6354268249f6b38175ed41855cf589500d2b02587dd28cb75cee40b7a2e7

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /templates/verenacrow/js/bootstrap.js HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "2431d-5e552acc4ea16-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 28103
content-type: application/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/templates/verenacrow/js/jquery-3.6.0.min.js

213.145.225.120

200 OK

31 kB

URL HTTP/2
www.verenacrow.at/templates/verenacrow/js/jquery-3.6.0.min.js
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
data
Size
31 kB (30892 bytes)
Hash
ba4c46982f72af707f2c98071fee49fe
f01870388a00361cecb1a736fdb5d5d7bd118763
ef1f0697863533a8355425fc6921df83a6e548076ce3aaa7decda423a44ae258

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /templates/verenacrow/js/jquery-3.6.0.min.js HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:32 GMT
etag: "15d9d-5e552acc4ea16-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 30892
content-type: application/javascript
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/favicon-16x16.png

213.145.225.120

200 OK

747 B

URL HTTP/2
www.verenacrow.at/favicon-16x16.png
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
PNG image data, 16 x 16, 8-bit grayscale, non-interlaced\012- data
Size
747 B (747 bytes)
Hash
e601c722c0d29f539b5f6bf7e5e7c5d6
9ff7a06a80d785a7648db79e1c21f0b9bc24e0d2
76486ece9d6157d62305fb440db568c3ea7299e07c1c322c5658191ef1d3d585

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:23 GMT
etag: "2eb-5e552ac3d0c80"
accept-ranges: bytes
content-length: 747
content-type: image/png
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/android-icon-192x192.png

213.145.225.120

200 OK

9.4 kB

URL HTTP/2
www.verenacrow.at/android-icon-192x192.png
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type
PNG image data, 192 x 192, 8-bit grayscale, non-interlaced\012- data
Size
9.4 kB (9441 bytes)
Hash
631a01d4dbf6708f851582a434b333dd
1666ad8ebaada0c7d96b0ca2b164ccafbfd87ee5
a76f6628440228f3d4d07620a8f96ed60d0515a6e8b45e9e238e658f52527399

HTTP Headers

GET /android-icon-192x192.png HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:23 GMT
etag: "24e1-5e552ac3f3f01"
accept-ranges: bytes
content-length: 9441
content-type: image/png
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5444
Expires: Sun, 11 Sep 2022 12:44:18 GMT
Date: Sun, 11 Sep 2022 11:13:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5444
Expires: Sun, 11 Sep 2022 12:44:18 GMT
Date: Sun, 11 Sep 2022 11:13:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5444
Expires: Sun, 11 Sep 2022 12:44:18 GMT
Date: Sun, 11 Sep 2022 11:13:34 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8626 bytes)
Hash
2b83fa95ed30533299bc754adaced672
27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af
bc59e5ba6abafd8e7b10d6f8ae2269cbf739a4b28f9cbbf3adfc29a9195e6985

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8626
x-amzn-requestid: 2372d7b6-1455-41ed-8a99-85e7cce9879e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YRTAhHdiIAMFhfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d3203-43f9b0d22f641878794b8640;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 00:55:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bk9FGKBLhbLvBrbdiUE5RVzToCH9kZah76aiogY7MzyXf8MLesr7sA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 07:35:26 GMT
age: 13088
etag: "27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9319 bytes)
Hash
de6622cfd812509b317913e1a5e9cfc8
84e4a39c92ab111cc1072f898990cea6b05da6cf
6d41b564c2e15215d05ba74ba2ae08abf74f6aef9e58e808d31afc6d1ba123af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234d0658-5bd0-4cc9-a828-3300a0005951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9319
x-amzn-requestid: 44d731e9-1da0-4ad0-9fbb-1b170fac3bf0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxaFtpIAMFWAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-2e155359546dae806f6dbfe2;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: cZslQ5Qc4PPIlpAtmGVbfr3NaPybUWZMJBz_pCrXkCSSq6hUztXVjA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:01 GMT
age: 48753
etag: "84e4a39c92ab111cc1072f898990cea6b05da6cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8485 bytes)
Hash
e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mfmj40aUc8l5RPk56M-pbqTwhde_HzYcmN5MDrfv-WFPhbpoShWYNw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:57:28 GMT
age: 47766
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13568 bytes)
Hash
8625e0707046e7a3715a8dbb40b1cae2
0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78
abc4c12561be08897341d9c8104c30a289357c0907e55c46895f7fb6afb2f75d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13568
x-amzn-requestid: ad06f499-3e04-414a-8a3f-6daa9e0124ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3yN1F2BIAMFoqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fd8b-3a17f11440d2f37b23ac7f6a;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:08:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iNRnq8nMhoTo9oY379Ynb6uPW0vNyf3dNufU_HpXNfzxvhrAEKEzJQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 14:09:02 GMT
age: 75872
etag: "0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.1 kB (6109 bytes)
Hash
8c35b7f5f8e1b0b24570a41b7d18533a
c5b82c9d77851820b8d206573d5c03cd36d27a20
bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6109
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2AhHZgIAMFlSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rnkjEbkwVPPR1stEuMkkuFcQ4WZMDjsuYKA46ZcxejvotwfCG6huhQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:43:03 GMT
age: 48631
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F811981ca-4b3f-4f29-af80-fe3d2cd10dcc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6843 bytes)
Hash
2d7f23ba6ae7c64ba15b344a073722bc
7e0ea8123a7fc1629ef72534112905cc635b0e25
060b7282494cbccf9ab058ef9996f823445f3edaddaec36df1a710330c2cd2f6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F811981ca-4b3f-4f29-af80-fe3d2cd10dcc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6843
x-amzn-requestid: 1ebc1cef-617c-4673-9b3f-e09ea2da82d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k-HeYIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-4a62b8435cd69f0329a3ba2d;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HTRFsmiL_0OOz2z3cP9ZL7aK2XYEAxxfysmZT0mYs3GreMfbOb9_Cw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:54:59 GMT
age: 47915
etag: "7e0ea8123a7fc1629ef72534112905cc635b0e25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.verenacrow.at/seite-nicht-gefunden

213.145.225.120

200 OK

0 B

URL HTTP/2
www.verenacrow.at/seite-nicht-gefunden
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /seite-nicht-gefunden HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
x-powered-by: PHP/7.4.30
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
content-encoding: gzip
vary: Accept-Encoding
x-content-encoded-by: Joomla
expires: Wed, 17 Aug 2005 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
last-modified: Sun, 11 Sep 2022 11:13:33 GMT
content-type: text/html; charset=utf-8
date: Sun, 11 Sep 2022 11:13:32 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/images/weapon

213.145.225.120

302 Found

0 B

URL HTTP/2
www.verenacrow.at/images/weapon
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/weapon HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
x-powered-by: PHP/7.4.30
set-cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328; path=/; secure; HttpOnly
x-content-type-options: nosniff
location: https://www.verenacrow.at/seite-nicht-gefunden
content-type: text/html; charset=UTF-8
date: Sun, 11 Sep 2022 11:13:32 GMT
server: Apache
X-Firefox-Spdy: h2

www.verenacrow.at/images/menu/home-bg.gif

213.145.225.120

200 OK

0 B

URL HTTP/2
www.verenacrow.at/images/menu/home-bg.gif
IP
213.145.225.120:0
ASN
#25575 Ledl.net GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/menu/home-bg.gif HTTP/1.1
Host: www.verenacrow.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.verenacrow.at/seite-nicht-gefunden
Connection: keep-alive
Cookie: 4efc0bfb081513ca4e13baca13c3afe3=73e78bc1657cfbad4e195557dc4f0328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
x-content-type-options: nosniff
last-modified: Wed, 03 Aug 2022 09:15:26 GMT
etag: "2ea05-5e552ac66cc1a"
accept-ranges: bytes
content-length: 190981
content-type: image/gif
date: Sun, 11 Sep 2022 11:13:33 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers