Report - www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip

Report Overview

Visited public
2024-12-04 14:35:25
Tags
URL
www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Finishing URL
www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
IP / ASN
185.26.107.42
#24935 Eurofiber France SAS
Title
Sign in to your microsoft account

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.alfolw.dk	unknown	2024-07-17	2024-11-09	2024-11-27	6.5 kB	110 kB	185.26.107.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-11-26	medium	www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip	Office365

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed
2024-12-04	medium	alfolw.dk	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	www.alfolw.dk/static/js/main.57fdf881.js	151 kB	2023-10-20 14:47	2024-12-26 17:26
Pretty URL www.alfolw.dk/static/js/main.57fdf881.js IP 185.26.107.42 ASN #24935 Eurofiber France SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-20 14:47 Last Seen2024-12-26 17:26 Times Seen94 Hash 4b7847cdd575cc88b43442152f95eeaf 38cba2fadd3a4fccefbe16e570fd6decb166df6f 252d960b87dee48d8b413aa4b8ee341fe7d442facbc745b9fb2552220073510d Loading...

HTTP Transactions (8)

URL IP Response Size

www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip

185.26.107.42

200 OK

354 B

URL User Request GET HTTP/2
www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
HTML document, ASCII text, with very long lines (596), with no line terminators
Size
354 B (354 bytes)
Hash
faf4cf1f38550e1ec1180ddd15eff608
b8638b1b7c153524458bc76b3eefafb6f69917e0
8a6eab9e589f7a0bac060d9cc58193335def23001ac575e124bc88384f58fbb8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: text/html
content-length: 354
last-modified: Fri, 23 Aug 2024 19:05:56 GMT
etag: "254-6205e7704e533;627d82c390e7c
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www.alfolw.dk/static/css/main.d1501581.css

185.26.107.42

200 OK

995 B

URL GET HTTP/2
www.alfolw.dk/static/css/main.d1501581.css
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
ASCII text, with very long lines (2738)
Size
995 B (995 bytes)
Hash
a9aa50c6913ce63747fe346422ef8593
23736bc130d85ee1a9f8cb14c0d8d2762c7ada93
da0673297b1629745597271177886a0e3fbfb0a8d557a71b0d485adcdf66e87c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/main.d1501581.css HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: text/css
content-length: 995
last-modified: Fri, 23 Aug 2024 19:11:08 GMT
etag: "adf-6205e89a0338f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www.alfolw.dk/static/js/main.57fdf881.js

185.26.107.42

200 OK

50 kB

URL GET HTTP/2
www.alfolw.dk/static/js/main.57fdf881.js
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
JavaScript source, ASCII text, with very long lines (65465)
Size
50 kB (49486 bytes)
Hash
4b7847cdd575cc88b43442152f95eeaf
38cba2fadd3a4fccefbe16e570fd6decb166df6f
252d960b87dee48d8b413aa4b8ee341fe7d442facbc745b9fb2552220073510d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/main.57fdf881.js HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: text/javascript
content-length: 49486
last-modified: Fri, 23 Aug 2024 19:12:48 GMT
etag: "24d14-6205e8f940492-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www.alfolw.dk/static/media/ar.43280e0ba671a1d8b5e34f1931c4fe4b.svg

185.26.107.42

200 OK

513 B

URL GET HTTP/2
www.alfolw.dk/static/media/ar.43280e0ba671a1d8b5e34f1931c4fe4b.svg
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
SVG Scalable Vector Graphics image
Size
513 B (513 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/media/ar.43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: image/svg+xml
content-length: 513
last-modified: Fri, 23 Aug 2024 19:14:07 GMT
etag: "201-6205e94561874"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.alfolw.dk/static/media/logo.564db913a7fa0ca42727161c6d031bef.svg

185.26.107.42

200 OK

3.7 kB

URL GET HTTP/2
www.alfolw.dk/static/media/logo.564db913a7fa0ca42727161c6d031bef.svg
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
SVG Scalable Vector Graphics image
Size
3.7 kB (3651 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/media/logo.564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: image/svg+xml
content-length: 3651
last-modified: Fri, 23 Aug 2024 19:16:11 GMT
etag: "e43-6205e9bb1bbe1"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.alfolw.dk/static/media/logo.b9b44a8b606dc3c847a4.webp

185.26.107.42

200 OK

48 kB

URL GET HTTP/2
www.alfolw.dk/static/media/logo.b9b44a8b606dc3c847a4.webp
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
RIFF (little-endian) data, Web/P image
Size
48 kB (47558 bytes)
Hash
13d5fafa8cd7e8547b0c45aeec958320
04b183b085f84dfa087a709278e3dbe56827295f
51d3989c3e2627d20a6629d8463d42eb83ef7225a83a6b68d99e9b10b9c941e1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/media/logo.b9b44a8b606dc3c847a4.webp HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/static/css/main.d1501581.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: image/webp
content-length: 47558
last-modified: Fri, 23 Aug 2024 19:14:35 GMT
etag: "b9c6-6205e95f68f1b"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.alfolw.dk/mss.png

185.26.107.42

200 OK

2.9 kB

URL GET HTTP/2
www.alfolw.dk/mss.png
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
2.9 kB (2947 bytes)
Hash
01d3f16b2bdab39a69d2e0f2019dd696
2f7e0b5e6f9563772942dde295c66c54e163c157
8ee5be289b25fe1868edb80dd7ebd3f8de6f9cc581c1324261bc74146a2bd0e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /mss.png HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: image/png
content-length: 2947
last-modified: Fri, 23 Aug 2024 19:06:13 GMT
etag: "b83-6205e7807d1ca"
accept-ranges: bytes
X-Firefox-Spdy: h2

www.alfolw.dk/mss.png

185.26.107.42

200 OK

2.9 kB

URL GET HTTP/2
www.alfolw.dk/mss.png
IP
185.26.107.42:443
ASN
#24935 Eurofiber France SAS

Requested by
https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Certificate
IssuerLet's Encrypt
Subjectalfolw.dk
Fingerprint3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56
ValidityTue, 26 Nov 2024 21:15:58 GMT - Mon, 24 Feb 2025 21:15:57 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
2.9 kB (2947 bytes)
Hash
01d3f16b2bdab39a69d2e0f2019dd696
2f7e0b5e6f9563772942dde295c66c54e163c157
8ee5be289b25fe1868edb80dd7ebd3f8de6f9cc581c1324261bc74146a2bd0e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /mss.png HTTP/1.1
Host: www.alfolw.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 04 Dec 2024 14:35:00 GMT
content-type: image/png
content-length: 2947
last-modified: Fri, 23 Aug 2024 19:06:13 GMT
etag: "b83-6205e7807d1ca"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2