Report - berlinmarriott.menoia.de

Report Overview

Submitted URL
berlinmarriott.menoia.de
IP
159.89.98.176
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-05-07 22:33:30
Access
public
Website Title
Anmeldung Login | ME‘NOIA
Final URL
berlinmarriott.menoia.de/auth/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
berlinmarriott.menoia.de	unknown	unknown	No data	No data	10 kB	805 kB	159.89.98.176

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	berlinmarriott.menoia.de/static/scripts-common.js?version=1715013169	188 kB	2024-05-08	2024-05-08
Pretty URL berlinmarriott.menoia.de/static/scripts-common.js?version=1715013169 IP 159.89.98.176 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 00:33:37 Last Seen2024-05-08 00:33:37 Times Seen2 Hash 45d80c46073e9c1546fb5998c2bf2f74 fdc665dcfed3ffff879aa60c0e480595ea0041c4 ea9cc2d0ed7ec417b07a22fb660d86889bfef132fe61974c3dbbd28ad3bdac24 Loading...

HTTP Transactions (17)

	URL	IP	Response	Size
	berlinmarriott.menoia.de/	159.89.98.176	302 Found	416 B
URL User Request GET HTTP/2 berlinmarriott.menoia.de/ IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type HTML document, ASCII text Size 416 B (416 bytes) Hash 710eb932fc76acdbb23010c57b0a2b21 ecf064fa2ba40accbc6b8c67a4de15bf8f76294d bab9262b40075a18e185148a148015e42072d0bd82c555ac1bf47dc60bde6f83 HTTP Headers `GET / HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found alt-svc: h3=":443"; ma=2592000 cache-control: no-cache content-type: text/html; charset=UTF-8 date: Tue, 07 May 2024 22:33:05 GMT location: https://berlinmarriott.menoia.de/auth/login server: Caddy set-cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; expires=Wed, 08-May-2024 00:33:05 GMT; Max-Age=7200; path=/; HttpOnly status: 302 Found x-powered-by: PHP/7.2.34 content-length: 416 X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/assets/styles/auth.css?version=1715013169	159.89.98.176	200 OK	846 B
URL GET HTTP/2 berlinmarriott.menoia.de/assets/styles/auth.css?version=1715013169 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type ASCII text Size 846 B (846 bytes) Hash 0df1c912a6472f20b55748bdf1485d90 1c911e92469f8be102d834a54bf97a2b19be69cb 915be408fab1ce63f30049083e028d431fb1a1a207cd450320f697cb5d95875e HTTP Headers GET /assets/styles/auth.css?version=1715013169 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: text/css; charset=utf-8 etag: "sd2ompni" last-modified: Mon, 06 May 2024 16:32:49 GMT server: Caddy content-length: 846 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/media/company/1650367573_625e9c55b45a4-thumb.png	159.89.98.176	200 OK	11 kB
URL GET HTTP/2 berlinmarriott.menoia.de/media/company/1650367573_625e9c55b45a4-thumb.png IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Size 11 kB (11019 bytes) Hash c143bddfc4b9e5b182cdd556e1ccd20c a21e21856ce1af43bb5cf5032302baaa2aac09ea 842837c655da546f694a72b7d99e7597c7ffe2a61b10bbc8bb63ede6bc34d40e HTTP Headers GET /media/company/1650367573_625e9c55b45a4-thumb.png HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: image/png etag: "s3vj8i8i3" last-modified: Thu, 09 Nov 2023 20:50:42 GMT server: Caddy content-length: 11019 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/assets/images/logo.svg	159.89.98.176	200 OK	3.1 kB
URL GET HTTP/2 berlinmarriott.menoia.de/assets/images/logo.svg IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type SVG Scalable Vector Graphics image Size 3.1 kB (3107 bytes) Hash 9c626f1fe1eefe813215e629418a2419 3c162dd39835d00ca6426a40d1e16e2826135cdb 3e03241f5dd436fb865ffab4eb3b01a47bda4db97094dbabe983db210bea65da HTTP Headers GET /assets/images/logo.svg HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: image/svg+xml etag: "sd2omo2eb" last-modified: Mon, 06 May 2024 16:32:48 GMT server: Caddy content-length: 3107 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/assets/bootstrap/css/bootstrap.min.css	159.89.98.176	200 OK	122 kB
URL GET HTTP/2 berlinmarriott.menoia.de/assets/bootstrap/css/bootstrap.min.css IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type ASCII text, with very long lines (65369) Size 122 kB (121457 bytes) Hash 7f89537eaf606bff49f5cc1a7c24dbca b0972fdcce82fd583d4c2ccc3f2e3df7404a19d0 6d92dfc1700fd38cd130ad818e23bc8aef697f815b2ea5face2b5dfad22f2e11 HTTP Headers GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: text/css; charset=utf-8 etag: "sd2omo2lpt" last-modified: Mon, 06 May 2024 16:32:48 GMT server: Caddy content-length: 121457 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219	159.89.98.176	200 OK	113 kB
URL GET HTTP/2 berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 113 kB (112856 bytes) Hash bf7adcd8505f79cfab26be092af591a1 1f33038e6970b3cbdce65d0b5683c223c24f56c7 cd3ef184764100b7e38952da6c1d2a2e5ce1c4b763b66169e49f5d756340d804 HTTP Headers GET /static/styles-classic.css?version=1715013219 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: text/css; charset=utf-8 etag: "sd2oo32f2w" last-modified: Mon, 06 May 2024 16:33:39 GMT server: Caddy content-length: 112856 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/static/scripts-common.js?version=1715013169	159.89.98.176	200 OK	188 kB
URL GET HTTP/2 berlinmarriott.menoia.de/static/scripts-common.js?version=1715013169 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 188 kB (187501 bytes) Hash 45d80c46073e9c1546fb5998c2bf2f74 fdc665dcfed3ffff879aa60c0e480595ea0041c4 ea9cc2d0ed7ec417b07a22fb660d86889bfef132fe61974c3dbbd28ad3bdac24 HTTP Headers GET /static/scripts-common.js?version=1715013169 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: application/javascript etag: "sd2omp40od" last-modified: Mon, 06 May 2024 16:32:49 GMT server: Caddy content-length: 187501 date: Tue, 07 May 2024 22:33:05 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/assets/images/header.jpg	159.89.98.176	200 OK	227 kB
URL GET HTTP/2 berlinmarriott.menoia.de/assets/images/header.jpg IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, PhotometricInterpretation=RGB, description=portrait of young beautiful woman on green leafs back, manufacturer=SONY, model=ILCE-7M3, orientation=upper-left, xresolution=240, yresolution=248, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2020:06:03 11:19:16], baseline, precision 8, 2000x771, components 3 Size 227 kB (226583 bytes) Hash dde1e3c0a1a06d98dc502394b19d298a c76cda256a633a7be4a90412ab8d83f28480fefb 6213ead9c113064f7dce825babc0e31505f489b87460a29525238c20dfb5f2fb HTTP Headers GET /assets/images/header.jpg HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/assets/styles/auth.css?version=1715013169 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: image/jpeg etag: "sd2omo4utz" last-modified: Mon, 06 May 2024 16:32:48 GMT server: Caddy content-length: 226583 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/webfonts/Open_Sans-400-latin20.woff2	159.89.98.176	200 OK	19 kB
URL GET HTTP/2 berlinmarriott.menoia.de/webfonts/Open_Sans-400-latin20.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 18668, version 1.0 Size 19 kB (18668 bytes) Hash 8655d20bbcc8cdbfab17b6be6cf55df3 90edbfa9a7dabb185487b4774076f82eb6412270 e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6 HTTP Headers GET /webfonts/Open_Sans-400-latin20.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2oo2eek" last-modified: Mon, 06 May 2024 16:33:38 GMT server: Caddy content-length: 18668 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/assets/bootstrap/fonts/glyphicons-halflings-regular.woff2	159.89.98.176	200 OK	18 kB
URL GET HTTP/2 berlinmarriott.menoia.de/assets/bootstrap/fonts/glyphicons-halflings-regular.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589 Size 18 kB (18028 bytes) Hash 448c34a56d699c29117adc64c43affeb ca35b697d99cae4d1b60f2d60fcd37771987eb07 fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c HTTP Headers GET /assets/bootstrap/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/assets/bootstrap/css/bootstrap.min.css Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2omodws" last-modified: Mon, 06 May 2024 16:32:48 GMT server: Caddy content-length: 18028 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/webfonts/Open_Sans-600-latin30.woff2	159.89.98.176	200 OK	19 kB
URL GET HTTP/2 berlinmarriott.menoia.de/webfonts/Open_Sans-600-latin30.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 18596, version 1.0 Size 19 kB (18596 bytes) Hash c1422f94ea801088e9b159a80afd514b b49d3cb83589976dde1166aa38dcb553620a0498 7f7fcda5f37c18def2314b911b02417b773c4f459df0d25931ffa7389b872b89 HTTP Headers GET /webfonts/Open_Sans-600-latin30.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2oo2eck" last-modified: Mon, 06 May 2024 16:33:38 GMT server: Caddy content-length: 18596 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/webfonts/Raleway-300-latin5.woff2	159.89.98.176	200 OK	22 kB
URL GET HTTP/2 berlinmarriott.menoia.de/webfonts/Raleway-300-latin5.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 22416, version 1.0 Size 22 kB (22416 bytes) Hash da34a23242474ada06659f0758d1399e 0c6bbee5e6cfb66df763dae023b6b14070e2a013 35c074f93b228f96cc96180fccae25f9781cb941eb66d3067f244f147519dc84 HTTP Headers GET /webfonts/Raleway-300-latin5.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2oo3hao" last-modified: Mon, 06 May 2024 16:33:39 GMT server: Caddy content-length: 22416 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/webfonts/Raleway-600-latin10.woff2	159.89.98.176	200 OK	23 kB
URL GET HTTP/2 berlinmarriott.menoia.de/webfonts/Raleway-600-latin10.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 22840, version 1.0 Size 23 kB (22840 bytes) Hash ca1e64c8cd016ce85e6ced7794f61616 6aa1f6e661e5ae196fa29e111da82d122f48450b 17168fb5bddeac8a2d5fa5eb5d13f5cb4c6e380fb68f9202740a8e645bd1d7fd HTTP Headers GET /webfonts/Raleway-600-latin10.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2oo3hmg" last-modified: Mon, 06 May 2024 16:33:39 GMT server: Caddy content-length: 22840 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/webfonts/Open_Sans-700-latin40.woff2	159.89.98.176	200 OK	18 kB
URL GET HTTP/2 berlinmarriott.menoia.de/webfonts/Open_Sans-700-latin40.woff2 IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Web Open Font Format (Version 2), TrueType, length 18260, version 1.0 Size 18 kB (18260 bytes) Hash 36f81686bbf993fbfe3aed9ae2f55e5b 5d18e2d5e48e0f5ba172e7477eed432541087402 114f872abf6cae70383b09ca2168821991fde718702d79cdc457a49b03560cb0 HTTP Headers GET /webfonts/Open_Sans-700-latin40.woff2 HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/static/styles-classic.css?version=1715013219 Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: font/woff2 etag: "sd2oo2e38" last-modified: Mon, 06 May 2024 16:33:38 GMT server: Caddy content-length: 18260 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/android-chrome-192x192.png	159.89.98.176	200 OK	3.9 kB
URL GET HTTP/2 berlinmarriott.menoia.de/android-chrome-192x192.png IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced Size 3.9 kB (3903 bytes) Hash 38984980b34eb8c40b124aacbb6d35f4 865a32512edd54d5b1cbde345d233bab3f80a4fb 550bcc54f0d1c612a0ee27bd708f9ee2831b1c6b39b02316e4ac07ab01175c4b HTTP Headers GET /android-chrome-192x192.png HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: image/png etag: "sd2omo30f" last-modified: Mon, 06 May 2024 16:32:48 GMT server: Caddy content-length: 3903 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/favicon-16x16.png	159.89.98.176	200 OK	354 B
URL GET HTTP/2 berlinmarriott.menoia.de/favicon-16x16.png IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Requested by https://berlinmarriott.menoia.de/auth/login Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced Size 354 B (354 bytes) Hash 999ee6799b7fc6ab4f6b772bce0604d9 7d5359f15043baa6856dd6a6e0bcb3edceb9d6a6 9d2bad86b7c791dd3dd5317f001222b33bb09c2a99713184e5d63dca21edd213 HTTP Headers GET /favicon-16x16.png HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://berlinmarriott.menoia.de/auth/login Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK accept-ranges: bytes alt-svc: h3=":443"; ma=2592000 content-type: image/png etag: "sd2omp9u" last-modified: Mon, 06 May 2024 16:32:49 GMT server: Caddy content-length: 354 date: Tue, 07 May 2024 22:33:06 GMT X-Firefox-Spdy: h2`

	berlinmarriott.menoia.de/auth/login	159.89.98.176	200 OK	13 kB
URL User Request GET HTTP/2 berlinmarriott.menoia.de/auth/login IP 159.89.98.176:443 ASN #14061 DIGITALOCEAN-ASN Certificate IssuerLet's Encrypt Subjectberlinmarriott.menoia.de FingerprintEE:1A:AB:54:D1:5C:93:CE:32:FB:D2:16:7F:B9:8A:80:23:6F:57:84 ValidityFri, 03 May 2024 09:08:14 GMT - Thu, 01 Aug 2024 09:08:13 GMT File type Size 13 kB (12937 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /auth/login HTTP/1.1 Host: berlinmarriott.menoia.de User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK alt-svc: h3=":443"; ma=2592000 cache-control: no-cache content-type: text/html; charset=UTF-8 date: Tue, 07 May 2024 22:33:05 GMT server: Caddy set-cookie: XSRF-TOKEN=QhW234c3s1BTy7kyBbb7jrFmfuYYlDK2b9WFFvXb; expires=Wed, 08-May-2024 00:33:05 GMT; Max-Age=7200; path=/ laravel_session=dOnwcf0mk6O1IToMKhxHinRtYYU1rtdwdXBPkRzs; expires=Wed, 08-May-2024 00:33:05 GMT; Max-Age=7200; path=/; HttpOnly x-powered-by: PHP/7.2.34 X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP