{"report_id":"97247ef3-6fe2-4b22-8d02-ec008c7a91a4","version":6,"status":"done","tags":[],"date":"2024-12-04T14:35:25Z","url":{"schema":"http","addr":"www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":0,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"title":"Sign in to your microsoft account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-12T14:35:25Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.alfolw.dk","ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"domain_registered":"2024-07-17","domain_rank":0,"first_seen":"2024-11-09T11:49:01.117579Z","last_seen":"2024-11-27T21:59:34.546881Z","alert_count":9,"request_count":8,"received_data":110463,"sent_data":6467,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-11-26","alert":"Office365","trigger":"www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.alfolw.dk/static/js/main.57fdf881.js","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b7847cdd575cc88b43442152f95eeaf","sha1":"38cba2fadd3a4fccefbe16e570fd6decb166df6f","sha256":"252d960b87dee48d8b413aa4b8ee341fe7d442facbc745b9fb2552220073510d","sha512":"1f83dba16803c8653f0f4d347424e59d397eeda3fef3e9ec0d623e1eeac6865b4cde0a0d84df7c3564957039360e99f20d09dc20611a445efc6f272ddb39139f","ssdeep":"1536:OhOCvT6waFDt6XWxH8PmdEfNkR+KwvX4dNnN8rRYIfvOxgT0blBmVBFT3Rn:OhOCb636W8LfVnvX4dNkYWWxgTSBO79","tlshash":"78e3f7e93995f9616bf311b700af1407733d2a1b280c4560a211fddab9f845eb12bf9e","size":150804,"data":"","first_seen":"2023-10-20T14:47:37Z","last_seen":"2025-04-19T13:53:45.935329Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-04T14:35:00.026Z","timestamp":1733322900026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 354\r\nlast-modified: Fri, 23 Aug 2024 19:05:56 GMT\r\netag: \"254-6205e7704e533;627d82c390e7c\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":354,"size_decoded":596,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (596), with no line terminators","md5":"faf4cf1f38550e1ec1180ddd15eff608","sha1":"b8638b1b7c153524458bc76b3eefafb6f69917e0","sha256":"8a6eab9e589f7a0bac060d9cc58193335def23001ac575e124bc88384f58fbb8","sha512":"d11ba7c6b6ef035254452330cd4cf86f630597e09ae6c3b04ebbe7304728cd067f6356e37683714dd207854e7e303db97acd6054f0a7a01a2a4c76ac81381852","ssdeep":"","tlshash":"99f0e183cc11c44d573017b6eca2b02caa4ab91ce591fd54bd8908be0ee4bf38c57a11","first_seen":"2023-10-20T14:47:37Z","last_seen":"2025-04-19T13:53:45.934749Z","times_seen":206,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":198,"dns":0,"connect":27,"send":0,"wait":33,"receive":1,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-11-26","alert":"Office365","trigger":"www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/static/css/main.d1501581.css","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.559Z","timestamp":1733322900559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /static/css/main.d1501581.css HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 995\r\nlast-modified: Fri, 23 Aug 2024 19:11:08 GMT\r\netag: \"adf-6205e89a0338f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":995,"size_decoded":2783,"mime_type":"text/css","magic":"ASCII text, with very long lines (2738)","md5":"a9aa50c6913ce63747fe346422ef8593","sha1":"23736bc130d85ee1a9f8cb14c0d8d2762c7ada93","sha256":"da0673297b1629745597271177886a0e3fbfb0a8d557a71b0d485adcdf66e87c","sha512":"003706fbe1745429bd21258cf5974c3165ec6bdc296f69a0f80cd022c4c8980101caaebacde58f55cfe5ddc003fcc735d26f752079b057d9a9f096b674df89a1","ssdeep":"","tlshash":"ca51f2326f92242e7817cde2b892dfdd0025c643d1569778ac27b63196c70e31a36f44","first_seen":"2023-10-20T14:47:37Z","last_seen":"2026-04-02T09:00:54.350729Z","times_seen":243,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/static/js/main.57fdf881.js","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.556Z","timestamp":1733322900556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /static/js/main.57fdf881.js HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 49486\r\nlast-modified: Fri, 23 Aug 2024 19:12:48 GMT\r\netag: \"24d14-6205e8f940492-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49486,"size_decoded":150804,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"4b7847cdd575cc88b43442152f95eeaf","sha1":"38cba2fadd3a4fccefbe16e570fd6decb166df6f","sha256":"252d960b87dee48d8b413aa4b8ee341fe7d442facbc745b9fb2552220073510d","sha512":"1f83dba16803c8653f0f4d347424e59d397eeda3fef3e9ec0d623e1eeac6865b4cde0a0d84df7c3564957039360e99f20d09dc20611a445efc6f272ddb39139f","ssdeep":"1536:OhOCvT6waFDt6XWxH8PmdEfNkR+KwvX4dNnN8rRYIfvOxgT0blBmVBFT3Rn:OhOCb636W8LfVnvX4dNkYWWxgTSBO79","tlshash":"78e3f7e93995f9616bf311b700af1407733d2a1b280c4560a211fddab9f845eb12bf9e","first_seen":"2023-10-20T14:47:37Z","last_seen":"2025-04-19T13:53:45.935329Z","times_seen":223,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/static/media/ar.43280e0ba671a1d8b5e34f1931c4fe4b.svg","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.722Z","timestamp":1733322900722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /static/media/ar.43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 513\r\nlast-modified: Fri, 23 Aug 2024 19:14:07 GMT\r\netag: \"201-6205e94561874\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":513,"size_decoded":513,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9cc2824ef3517b6c4160dcf8ff7d410","sha1":"8db9aebad84ca6e4225bfdd2458ff3821cc4f064","sha256":"34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58","sha512":"aa3ddab0a1cff9533f9a668aba4fb5e3d75ed9f8aff8a1caa4c29f9126d85ff4529e82712c0119d2e81035d1ce1cc491ff9473384d211317d4d00e0e234ad97f","ssdeep":"","tlshash":"29f0598a41c8fb142ce08050dff8ea28540270c3fb4e5008b1922b18e2ef383f6406f5","first_seen":"2023-04-19T20:10:52Z","last_seen":"2026-04-06T16:24:56.591891Z","times_seen":29674,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/static/media/logo.564db913a7fa0ca42727161c6d031bef.svg","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.719Z","timestamp":1733322900719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /static/media/logo.564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3651\r\nlast-modified: Fri, 23 Aug 2024 19:16:11 GMT\r\netag: \"e43-6205e9bb1bbe1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3651,"size_decoded":3651,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-04-06T16:24:56.621114Z","times_seen":122445,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/static/media/logo.b9b44a8b606dc3c847a4.webp","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.724Z","timestamp":1733322900724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /static/media/logo.b9b44a8b606dc3c847a4.webp HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/static/css/main.d1501581.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47558\r\nlast-modified: Fri, 23 Aug 2024 19:14:35 GMT\r\netag: \"b9c6-6205e95f68f1b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47558,"size_decoded":47558,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13d5fafa8cd7e8547b0c45aeec958320","sha1":"04b183b085f84dfa087a709278e3dbe56827295f","sha256":"51d3989c3e2627d20a6629d8463d42eb83ef7225a83a6b68d99e9b10b9c941e1","sha512":"c6dc0c739b84b009b7b2cfeb5354beb5c85ed093a6b95e12925ead5127a23c9c3e6471aaa8bba00cd9999323409c3180749559e1e614b307f96378ecaf51058b","ssdeep":"768:Kgr04jmSVn8CTeY1nEgg+1xfefE+K6G7BTSqwd5Qe+zARi8Ddz:Ks9jjeY1EgmE+psS/d5827dz","tlshash":"0023f2dc937a289ce86cfdbf69d052c33457d48da649f9453b074ab39a262c3194843b","first_seen":"2023-10-20T14:47:37Z","last_seen":"2026-04-02T09:00:54.348916Z","times_seen":238,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/mss.png","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.786Z","timestamp":1733322900786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /mss.png HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 2947\r\nlast-modified: Fri, 23 Aug 2024 19:06:13 GMT\r\netag: \"b83-6205e7807d1ca\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2947,"size_decoded":2947,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"01d3f16b2bdab39a69d2e0f2019dd696","sha1":"2f7e0b5e6f9563772942dde295c66c54e163c157","sha256":"8ee5be289b25fe1868edb80dd7ebd3f8de6f9cc581c1324261bc74146a2bd0e8","sha512":"fea9220b6d809612a42874d595f53cfa82ac8b567bc814d7ddbf964d5df7ca664cc6c7449d05129890308328ecc3967ede637a4054743a263ab3e60c2c50f142","ssdeep":"","tlshash":"6351a18a13004787a439dc2ddb470ce48df29bc71bbf83a8294d23291598b21fb48fd8","first_seen":"2023-05-18T19:11:41Z","last_seen":"2026-04-05T07:18:38.030584Z","times_seen":334,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.alfolw.dk/mss.png","fqdn":"www.alfolw.dk","domain":"alfolw.dk","tld":"dk"},"ip":{"addr":"185.26.107.42","port":443,"asn":24935,"as":"Eurofiber France SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip","date":"2024-12-04T14:35:00.786Z","timestamp":1733322900786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfolw.dk","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 21:15:58 GMT","end":"Mon, 24 Feb 2025 21:15:57 GMT"},"fingerprint":{"sha1":"3B:74:C5:88:98:76:F8:49:B4:CF:5B:5F:7B:74:06:6F:DB:A5:23:56","sha256":"5D:AF:71:32:65:B1:DB:33:12:06:81:45:AE:2F:5F:AB:61:B7:4E:40:E8:7E:6F:72:73:0F:58:B8:01:5E:BD:D2"}}},"request":{"raw":"GET /mss.png HTTP/1.1\r\nHost: www.alfolw.dk\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.alfolw.dk/[email%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%83%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A3%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82%C3%83%C2%83%C3%82%C2%83%C3%83%C2%82%C3%82%C2%A2%C3%83%C2%83%C3%82%C2%82%C3%83%C2%82%C3%82%C2%82protected].zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Dec 2024 14:35:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 2947\r\nlast-modified: Fri, 23 Aug 2024 19:06:13 GMT\r\netag: \"b83-6205e7807d1ca\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2947,"size_decoded":2947,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"01d3f16b2bdab39a69d2e0f2019dd696","sha1":"2f7e0b5e6f9563772942dde295c66c54e163c157","sha256":"8ee5be289b25fe1868edb80dd7ebd3f8de6f9cc581c1324261bc74146a2bd0e8","sha512":"fea9220b6d809612a42874d595f53cfa82ac8b567bc814d7ddbf964d5df7ca664cc6c7449d05129890308328ecc3967ede637a4054743a263ab3e60c2c50f142","ssdeep":"","tlshash":"6351a18a13004787a439dc2ddb470ce48df29bc71bbf83a8294d23291598b21fb48fd8","first_seen":"2023-05-18T19:11:41Z","last_seen":"2026-04-05T07:18:38.030584Z","times_seen":334,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-04","alert":"Sinkholed","trigger":"alfolw.dk","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}