Report - www.mbtudsalgdanmark.com/

Report Overview

Submitted URL
www.mbtudsalgdanmark.com/
IP
196.196.205.51
ASN
#58065 Packet Exchange Limited
Submitted
2022-12-05 02:21:21
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.208.34.131
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	56 kB	34.120.237.76
www.mbtudsalgdanmark.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	17 kB	1.4 MB	196.196.205.51
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.33.119.27
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-05	medium	www.mbtudsalgdanmark.com/	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery_kinSlideshow.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/js/jquery.mmenu.min.all.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/js/jquery.jxa.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/js/jquery-1.7.2.min.js	Phishing
2022-12-05	medium	www.mbtudsalgdanmark.com/js/jquery.jxb.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	www.mbtudsalgdanmark.com/	530 B	2023-03-08	2023-03-08
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:30:23 Last Seen2023-03-08 16:30:29 Times Seen1 Hash 26d38ab38e1b642d32efe0b1a2be86cb f9a3199ed6ba97f44a2d018d979cc46c76b6f8d6 c9e5228160a717b7938f74500ad79b74198c5eac08271d2d41b0533551fbba3b Loading...

	www.mbtudsalgdanmark.com/js/jquery.jxa.js	2.7 kB	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/js/jquery.jxa.js IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:37 Times Seen7365 Hash ca643ec9e974f881e4c904db35bc40c7 759df5ef14b4e2c0c46770b5e408f600972294ca a1e3d7d98e8e9886c1181e7d53ddd4a6ff424a0fff640d1dc4b06757f096e0e2 Loading...

	www.mbtudsalgdanmark.com/	1.4 kB	2023-03-07	2024-04-25
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:14 Last Seen2024-04-25 19:23:25 Times Seen1041 Hash 204a344df3e7e4af26abe5e7024721a4 139b47ad14a6775209f11b1d4ccfff0f033f51da aed114f354b3a2d4a3cb59046449edaa62654b8d17938ac12824151309ff5e7f Loading...

	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js	20 kB	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:36 Times Seen4048 Hash 62160589e6cfe07633cf89ba5f6b850e 0ddc3da269bf68a7a86f82db9099181126c8aad5 c84699604527cf065821fe6ddb4aea785e99cfbcfbaec426a51cff1dfd617eca Loading...

	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js	158 kB	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:37 Times Seen13154 Hash 6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5 Loading...

	unknown	0 B	2023-03-07	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 09:49:41 Times Seen37088888 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.mbtudsalgdanmark.com/	44 B	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:36 Times Seen4085 Hash 0f9f77c8d79923a94eaf9563663b37bf e9de64d20cf4f34a74de22d7b663634bd64f1be6 f401ef86148cd7087f19cbf14828ac17464cb4e1712f05305fb571d07521bb01 Loading...

	www.mbtudsalgdanmark.com/	311 B	2023-03-07	2024-04-25
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:14 Last Seen2024-04-25 19:23:25 Times Seen1350 Hash d70835bbf8fe8ba2123a94e4d82f747f 75de4d4e1704be292925f155abc7514d2d164617 17e98b785268fe290b82a465cc6f8c2084e98ebde2f80edd10c676a552dc2a31 Loading...

	www.mbtudsalgdanmark.com/	257 B	2023-03-08	2023-03-08
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:30:23 Last Seen2023-03-08 16:30:29 Times Seen1 Hash 65a4e72dee90285f00d26036a3f309ac 9eee5eec01953b067cb9a3b7696877100f6ff0cd 074a959be88bcf052214bdc20476ed81dcc285481693d532029497672a181bc1 Loading...

	www.mbtudsalgdanmark.com/	19 B	2023-03-07	2024-04-25
Pretty URL www.mbtudsalgdanmark.com/ IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:14 Last Seen2024-04-25 19:35:41 Times Seen1169 Hash b597ccb77b826fd34751b800e56fface 39a900a0627d76c0f99b7947ecc248b7bc19a2db 9c1bfe1f224f624f38ec0ca4eda34a1314c709c3a78428907ae8bf78e0bbb9b6 Loading...

	www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js	86 kB	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 07:26:04 Times Seen17866 Hash e85aed5c30d734f1e30646e030d7a817 b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad 8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a Loading...

	www.mbtudsalgdanmark.com/js/jquery.mmenu.min.all.js	39 kB	2023-03-07	2024-04-26
Pretty URL www.mbtudsalgdanmark.com/js/jquery.mmenu.min.all.js IP 196.196.205.51 ASN #58065 Packet Exchange Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:37 Times Seen7469 Hash 5b2edbe2f95659b625a0b919ebf98286 1c5722696e849953fccdf41e0f0a01e3f37a80da a83065a45e7248c11ae228cab8da5d6bfcfa4791be255e2a78e81dbc456a4637 Loading...

		Size	First Seen	Last Seen
	#1 Eval - abf4a875d5948c9b1b39999a48ff7e87	13 kB	2023-03-07	2024-04-26
Pretty Observations First Seen2023-03-07 01:06:40 Last Seen2024-04-26 04:22:36 Times Seen3787 Hash abf4a875d5948c9b1b39999a48ff7e87 e686ced083517764a0dd7424d84ac5fa1b52f20b a824a97e1e060dcfc3950a4231c4510e369c17c0c8694340e873ff5bdc8397ea Loading...

HTTP Transactions (54)

URL IP Response Size

www.mbtudsalgdanmark.com/

196.196.205.51

301 Moved Permanently

241 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
241 B (241 bytes)
Hash
4e0db0718ab78adcb6328e0f1eec7b50
3892c68b9a7bdf914ac3528255e82350af8492c1
aa7d5a430da6c498a2f63759a8cfd60c35351da397aee028f3433285465ace43

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Dec 2022 02:21:10 GMT
Server: Apache
Location: https://www.mbtudsalgdanmark.com/
Content-Length: 241
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9881
Expires: Mon, 05 Dec 2022 05:05:51 GMT
Date: Mon, 05 Dec 2022 02:21:10 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2347
Cache-Control: max-age=118154
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 02:21:10 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:10:24 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9648
Expires: Mon, 05 Dec 2022 05:01:58 GMT
Date: Mon, 05 Dec 2022 02:21:10 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 02:18:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 164
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: OafAoRWpVm0uixRW5K2Ys1k3M8TsWwqrkah4Npx7lqV//K/wMlIhgYiqPr7g3ggqm6lpzV+6PoI=
x-amz-request-id: XCTGTYRB60ERW8JV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 01:47:12 GMT
age: 2038
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 02:21:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.mbtudsalgdanmark.com/

196.196.205.51

200 OK

25 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2667), with CRLF, LF line terminators
Size
25 kB (24729 bytes)
Hash
fd24eaec4b3c126094bbc0a77f1c5e4c
58ffa340a809d18a53b65b5308671d8e0d594a7a
2964d794bbd6e8b89909fd7f9e5f7d5c53c4a207e1f613bbffd8ab8da7e4ded3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:10 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2; path=/; HttpOnly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet.css

196.196.205.51

200 OK

0 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheet.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 00:36:02 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet8t5EN.css

196.196.205.51

200 OK

178 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet8t5EN.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text
Size
178 B (178 bytes)
Hash
3d372a1cb4a5c596147ea4123ced27d7
c77116d60116e0cbad041002a2afb14420be6d68
b356396cc5563c1983f4297821b0e8bddacc94ae2bc45ecc0dcda90cbf9e91c3

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheet8t5EN.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 178
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetXoTJj.css

196.196.205.51

200 OK

11 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetXoTJj.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text
Size
11 kB (10972 bytes)
Hash
1f4f24cce8ad1b1e2dcabd8cb93bacba
6141480ceb61fc40f53a0583c998bfe8c511cbcd
4c82ff5f9c06bfb4dd01c60b2e55550d19d8dd39a91c49684e2184a1028646e3

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetXoTJj.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 28 May 2021 06:52:48 GMT
Accept-Ranges: bytes
Content-Length: 10972
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet9dUvp.css

196.196.205.51

200 OK

2.4 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheet9dUvp.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with CRLF line terminators
Size
2.4 kB (2370 bytes)
Hash
4156c4f3b3e8eb75b3f0ffc31b9b3c48
d2e2362789756890af0cd16178e7dc00b66a2032
9b1778227a7dc12daa8be9254e2f90de342d38c9c26140ffd85c82de5a1f70cd

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheet9dUvp.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 2370
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetBS64z.css

196.196.205.51

200 OK

0 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetBS64z.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetBS64z.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 00:36:02 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetBqMLJ.css

196.196.205.51

200 OK

4.0 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetBqMLJ.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with CRLF line terminators
Size
4.0 kB (4039 bytes)
Hash
fd33ce30328d595358a75fcb7c01e269
03bff61cb0f1fe4c14eac956c1832dd3a628b3b4
c6c90220bb4e7c990aa6e08de6d1e1a5c6f2b16dd170632634c7d14be78704e1

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetBqMLJ.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 4039
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetZrRJS.css

196.196.205.51

200 OK

16 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetZrRJS.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with very long lines (876), with CRLF, LF line terminators
Size
16 kB (15854 bytes)
Hash
2cc460ad2980e0ad6068854ad92ad12c
af47570630c732ef87dfe8e4c48f857e0083cb45
a58eca9142eb425cd44009b41daf800fb0c6a9fa9d231ba59d9055a859a4e87c

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetZrRJS.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 15854
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetU8Bzb.css

196.196.205.51

200 OK

0 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetU8Bzb.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetU8Bzb.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetyUKnd.css

196.196.205.51

200 OK

0 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetyUKnd.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetyUKnd.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetyvYOP.css

196.196.205.51

200 OK

2.3 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetyvYOP.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text
Size
2.3 kB (2341 bytes)
Hash
77ac4aa1fc1b80426aa7ad8033dcb40c
fa30830acbbe5458aa445be97ecd00be2e1d60fa
93a60cfc2924d4c2d193bd12bd2ccd8d54b433b975bf842d9c2547a95efabdf0

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetyvYOP.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Wed, 29 Apr 2020 13:17:14 GMT
Accept-Ranges: bytes
Content-Length: 2341
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery_kinSlideshow.js

196.196.205.51

200 OK

9.7 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery_kinSlideshow.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ISO-8859 text, with very long lines (8513), with CRLF line terminators
Size
9.7 kB (9674 bytes)
Hash
08a763acea723e1d88cbce2f1c9b3317
ea20687e4f773bf67907b0edb029ebafbc110fc1
c17caeebb94b90d9aae3dc3142cda848f67e8b9425a6d25e434af74d2978aba4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/jscript/jscript_jquery_kinSlideshow.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Sun, 21 Nov 2010 05:51:10 GMT
Accept-Ranges: bytes
Content-Length: 9674
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetQUj5X.css

196.196.205.51

200 OK

86 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/stylesheetQUj5X.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
Unicode text, UTF-8 text
Size
86 kB (86379 bytes)
Hash
2c2780ff19debff6a66cab238e03f159
9193884747a570e70f277f15330baf61400b2da1
89979ae244114568bc931d2d0754bd5733bef4174747c425d3fdd91663eaddf6

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/stylesheetQUj5X.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 03 Sep 2021 14:42:48 GMT
Accept-Ranges: bytes
Content-Length: 86379
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js

196.196.205.51

200 OK

86 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
Unicode text, UTF-8 text, with very long lines (65168)
Size
86 kB (85925 bytes)
Hash
e85aed5c30d734f1e30646e030d7a817
b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad
8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/jscript/jscript_jquery.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 01 Apr 2011 12:28:42 GMT
Accept-Ranges: bytes
Content-Length: 85925
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js

196.196.205.51

200 OK

20 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ISO-8859 text, with very long lines (797), with CRLF line terminators
Size
20 kB (20417 bytes)
Hash
3d79a6c53803295ef00c052546d76500
f1481ce4f6f2aaefd7a5b6af19be42c7b1606dcc
93acbf26510bd264764a43d220a984b78270cd37536e0aa6bf8deb1fb28338f8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/jscript/jscript_lightbox.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Sun, 24 Oct 2010 00:36:54 GMT
Accept-Ranges: bytes
Content-Length: 20417
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/facebox/css/font-awesome.min.css

196.196.205.51

200 OK

32 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/facebox/css/font-awesome.min.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with very long lines (402)
Size
32 kB (31725 bytes)
Hash
0557ee20cbec5ddc14ba0481a4ae9ca8
b95de7bc2822aebad9564b64fd10ed69c60f611c
c6d652d309878c531875964ca66aa28c95a80204df250b89ef04d90be6c4f50d

HTTP Headers

GET /facebox/css/font-awesome.min.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Sun, 10 May 2020 07:08:48 GMT
Accept-Ranges: bytes
Content-Length: 31725
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/js/jquery.mmenu.min.all.js

196.196.205.51

200 OK

39 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/js/jquery.mmenu.min.all.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with very long lines (401)
Size
39 kB (38800 bytes)
Hash
5b2edbe2f95659b625a0b919ebf98286
1c5722696e849953fccdf41e0f0a01e3f37a80da
a83065a45e7248c11ae228cab8da5d6bfcfa4791be255e2a78e81dbc456a4637

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.mmenu.min.all.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 08 May 2020 12:51:20 GMT
Accept-Ranges: bytes
Content-Length: 38800
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/js/jquery.jxa.js

196.196.205.51

200 OK

2.7 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/js/jquery.jxa.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2658 bytes)
Hash
ca643ec9e974f881e4c904db35bc40c7
759df5ef14b4e2c0c46770b5e408f600972294ca
a1e3d7d98e8e9886c1181e7d53ddd4a6ff424a0fff640d1dc4b06757f096e0e2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.jxa.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Wed, 29 Apr 2020 10:46:06 GMT
Accept-Ranges: bytes
Content-Length: 2658
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js

196.196.205.51

200 OK

158 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with very long lines (749)
Size
158 kB (157648 bytes)
Hash
6f3d61313966fcd43b0334aa5fad66b9
22b2b120da5b405a348e4abdd865c496625d87ab
f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/jscript/jscript_1.11.1.min.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 05 May 2017 15:03:44 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/js/jquery-1.7.2.min.js

196.196.205.51

200 OK

158 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/js/jquery-1.7.2.min.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text, with very long lines (749)
Size
158 kB (157648 bytes)
Hash
6f3d61313966fcd43b0334aa5fad66b9
22b2b120da5b405a348e4abdd865c496625d87ab
f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery-1.7.2.min.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Thu, 07 May 2020 13:22:20 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Casual%20Sko%20Herre%20M%20rke%2011_ZOOM.jpg

196.196.205.51

200 OK

37 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Casual%20Sko%20Herre%20M%20rke%2011_ZOOM.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3\012- data
Size
37 kB (37111 bytes)
Hash
ebf59b8a6ade4db98e99ba482a79bcca
3f6f9aca18b02b82de54eb2ef4174eab5fa42c12
0199ea599ba91ddeb6888e04d4c4d3acc4dbb0735e60aa524a38cc817857b8b0

HTTP Headers

GET /images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Casual%20Sko%20Herre%20M%20rke%2011_ZOOM.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 27 Aug 2021 06:24:10 GMT
Accept-Ranges: bytes
Content-Length: 37111
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/print_stylesheetX58p3.css

196.196.205.51

200 OK

773 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/css/print_stylesheetX58p3.css
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
ASCII text
Size
773 B (773 bytes)
Hash
bbd38cb1b3b2298d98121752e951e872
f18e1df8b85734180dbe990473e12b9854913ed1
5ec0e5addd6014a7f05030ad5de266ee15d8d5192ea2efcaccafc3e235a0bd29

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/css/print_stylesheetX58p3.css HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 00:36:02 GMT
Accept-Ranges: bytes
Content-Length: 773
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Vandresko%20Herre%20Sort%20H%2051_ZOOM.jpg

196.196.205.51

200 OK

36 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Vandresko%20Herre%20Sort%20H%2051_ZOOM.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3\012- data
Size
36 kB (35732 bytes)
Hash
4cd88459117d747106a9e5179f1e7b7d
9c5462d33a6094cd8744713a0f71e90a4377167c
eee77e6329551f5230501edec588325d8affb664a13a5a9fcf91592015fa13f2

HTTP Headers

GET /images/large/mbtudsalgdanmark/MBT%20Modena%20II%20Vandresko%20Herre%20Sort%20H%2051_ZOOM.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 27 Aug 2021 06:34:48 GMT
Accept-Ranges: bytes
Content-Length: 35732
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/images/Women.jpg

196.196.205.51

200 OK

85 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/Women.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x350, components 3\012- data
Size
85 kB (84791 bytes)
Hash
4db14094dca87451738ce2f58f6d2601
e72b2db7a853d1f16bfdf20c16a883f5c9f36627
ebe87bd3fdafabec86cf528b7cfe05c8fa956156c798fd9af02fa65cf319f354

HTTP Headers

GET /images/Women.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 17:06:54 GMT
Accept-Ranges: bytes
Content-Length: 84791
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Kiburi%20Kjole%20Sandaler%20Dame%20LyseG%2091_ZOOM.jpg

196.196.205.51

200 OK

37 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Kiburi%20Kjole%20Sandaler%20Dame%20LyseG%2091_ZOOM.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3\012- data
Size
37 kB (36685 bytes)
Hash
a83e57ab0284cd87c44c91d8a6038298
6b1956a5c715502e0abed7dfc6364ce485c9f6a0
433e349d42ce61701874c07ab55c12db9e449f70051d2ca9128a1ace0fc3ed9e

HTTP Headers

GET /images/large/mbtudsalgdanmark/MBT%20Kiburi%20Kjole%20Sandaler%20Dame%20LyseG%2091_ZOOM.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 27 Aug 2021 06:28:28 GMT
Accept-Ranges: bytes
Content-Length: 36685
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/flag/DKK.gif

196.196.205.51

200 OK

393 B

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/flag/DKK.gif
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
GIF image data, version 89a, 27 x 17\012- data
Size
393 B (393 bytes)
Hash
c1722dc487f770747825dcb70c9db337
57fb7e8f453bbe10fef6b87cb71847ee46faa75b
3314529e8f17e4cf79e07cfb48ad688352b6608ce73a780e1f72fa0a9e26c8ce

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/images/flag/DKK.gif HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2016 15:09:56 GMT
Accept-Ranges: bytes
Content-Length: 393
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/MBT_bottmes.jpg

196.196.205.51

200 OK

96 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/MBT_bottmes.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2018 (Macintosh), datetime=2018:07:09 08:32:16], baseline, precision 8, 600x110, components 3\012- data
Size
96 kB (95874 bytes)
Hash
ac5697ab3768385005967ee0441dc463
f50467f2894b109f37c2fef32d4eeb818007f8a7
c981969a030838e9f97291419960d8822ead53c7d951592d54935c5881a5dee2

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/images/MBT_bottmes.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 17:47:04 GMT
Accept-Ranges: bytes
Content-Length: 95874
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Hana%20Vandresko%20Dame%20Oxy%20Fire%20-%20M%20121_ZOOM.jpg

196.196.205.51

200 OK

39 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/large/mbtudsalgdanmark/MBT%20Hana%20Vandresko%20Dame%20Oxy%20Fire%20-%20M%20121_ZOOM.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3\012- data
Size
39 kB (39399 bytes)
Hash
b81a03273a8a9264ed774a64f4dfc76d
dcf774b027c8d2dd473696ded78eaf2edd849714
1de5181e5cd6bdd759954ab4ae531ead53142c752f79f9c14fe72ef7b5907a33

HTTP Headers

GET /images/large/mbtudsalgdanmark/MBT%20Hana%20Vandresko%20Dame%20Oxy%20Fire%20-%20M%20121_ZOOM.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 27 Aug 2021 06:33:38 GMT
Accept-Ranges: bytes
Content-Length: 39399
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/logoMBT.png

196.196.205.51

200 OK

6.8 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/logoMBT.png
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
PNG image data, 115 x 40, 8-bit/color RGBA, interlaced\012- data
Size
6.8 kB (6796 bytes)
Hash
20ecac7f4594d82f3cf2a882b22ee561
ea9850735bef4f4814ed2b7bf24c3d18c8d48f85
beccbc4cd66656e08f85034d99c8acca45e160e6c59834e522f4aa6c5853647f

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/images/logoMBT.png HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 13:30:20 GMT
Accept-Ranges: bytes
Content-Length: 6796
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

www.mbtudsalgdanmark.com/images/media_banner_18.jpg

196.196.205.51

200 OK

82 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/media_banner_18.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.2 (Windows), datetime=2021:04:23 13:03:16], baseline, precision 8, 294x196, components 3\012- data
Size
82 kB (81723 bytes)
Hash
45b2f4dab21a922b360706ca5de1e8c2
097c9b4ab22ae70d2dcf341d1ff2370d593ef69f
e40cf2f75e8b9fd9b8886823d852164b5cb0f3bd05fe2f170797b899a161b168

HTTP Headers

GET /images/media_banner_18.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 15:28:04 GMT
Accept-Ranges: bytes
Content-Length: 81723
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/images/media_banner_7.jpg

196.196.205.51

200 OK

69 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/media_banner_7.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.2 (Windows), datetime=2021:04:23 13:01:21], baseline, precision 8, 294x196, components 3\012- data
Size
69 kB (69162 bytes)
Hash
4929c20f76291aa903451270567907d2
a31ef84fcf25a70652b65d379aa5df9135351f59
1af60e615edd94fc01ed92dab6a300cbef53c9566412c092baf761b4ad4d6374

HTTP Headers

GET /images/media_banner_7.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 13:36:32 GMT
Accept-Ranges: bytes
Content-Length: 69162
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/images/Men.jpg

196.196.205.51

200 OK

56 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/images/Men.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x350, components 3\012- data
Size
56 kB (56458 bytes)
Hash
681c7b78f0cdbfd5ba23649b089ee740
0218c451b410d30e2aa551ebdd32c873b2482ebc
8d2555d7dc0a3fa64760a524f251dbfa44a1bf8d51228f05838a994b3e541bda

HTTP Headers

GET /images/Men.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 17:06:54 GMT
Accept-Ranges: bytes
Content-Length: 56458
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/banner.jpg

196.196.205.51

200 OK

128 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/includes/templates/mbtudsalgdanmark/images/banner.jpg
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1460x547, components 3\012- data
Size
128 kB (128363 bytes)
Hash
044cf1efd54c0a500b9633f348fd105a
d09da1636ac05e49cec943f9c51096e38e0cb1bc
0aba29e42c3514f98557e38ba606c2375e58c7f892ade7c5553d0968e570a854

HTTP Headers

GET /includes/templates/mbtudsalgdanmark/images/banner.jpg HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 15:23:00 GMT
Accept-Ranges: bytes
Content-Length: 128363
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

www.mbtudsalgdanmark.com/js/jquery.jxb.js

196.196.205.51

200 OK

77 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/js/jquery.jxb.js
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/jquery.jxb.js HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Fri, 05 May 2017 15:03:44 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 02:08:58 GMT
cache-control: public,max-age=3600
age: 733
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

www.mbtudsalgdanmark.com/favicon.ico

196.196.205.51

200 OK

1.2 kB

URL HTTP/1.1
www.mbtudsalgdanmark.com/favicon.ico
IP
196.196.205.51:0
ASN
#58065 Packet Exchange Limited

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
fc5240d3417bbeea16c1f79d599b5439
f1e1f6d2114bc44a702c50f7b7f833b32ee35be1
835fa4bf9dfb89e943616641dada95f66fc90d42453e35b8ca7c04770f532b3a

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.mbtudsalgdanmark.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mbtudsalgdanmark.com/
Cookie: zenid=k8ubhf5m56v4ak4acevsal7eu2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 02:21:11 GMT
Server: Apache
Last-Modified: Tue, 31 Aug 2021 13:31:24 GMT
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/x-icon

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2326
Cache-Control: max-age=113066
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 02:21:11 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:45:37 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.208.34.131

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.208.34.131:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wbSSHc6YTbY89h1QIQ97LA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: a2xw22nCWYEQmjaNyo6coCqzhaY=

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3308
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 02:21:13 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3308
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 02:21:13 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3308
Expires: Mon, 05 Dec 2022 03:16:21 GMT
Date: Mon, 05 Dec 2022 02:21:13 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10396 bytes)
Hash
24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:03:01 GMT
age: 15492
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6826 bytes)
Hash
a349d02cce160f72cc93f6fb6e45fa46
a6f82481ea0a820da0f199e8f9051a4aa4013c82
ab320118577a2dcb6ab7ad904d6350e187501a94b39b71fdd70b31cbc8853b24

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6826
x-amzn-requestid: f0abdba6-14c8-4aae-ba3b-37ba0af2ff08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_t2FsLIAMFekA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1325-3452be066acddb554f528cc3;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GS4yLzXiIZt-eL9T7gjbf2-vMu8i30WKPDmc2EQDxv0CELjdW1gMVA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:46:51 GMT
age: 16462
etag: "a6f82481ea0a820da0f199e8f9051a4aa4013c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F206a2aa2-193a-45ee-9210-82fa22154882.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7396 bytes)
Hash
fe33ecc20db57514c51c90694efebb16
e00b8b1bc1f98df439a264d1cd881e1021d7fdd5
9b0e56806a9f4e7458b58c29ec2050faebcded4ff1c4ef430733171ddae68cb7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F206a2aa2-193a-45ee-9210-82fa22154882.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7396
x-amzn-requestid: c7621897-64ac-4eb2-b25a-f9ea2e7059a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKVyFr5IAMF8QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdbe-4383156307fcd0da5022d553;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tyEtTMK1H4Sl1eKyySi7qu2CJokOzMaLj0fLriYd01UWNCyS44zC5g==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:07:02 GMT
age: 76451
etag: "e00b8b1bc1f98df439a264d1cd881e1021d7fdd5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13647 bytes)
Hash
6079166a1ed5bac7373183f03f33b84e
b0c9391b87a4560598e43d5084dda41e267974a9
3e2faccbc3e14a10da4a433d789068cdc3fb2d3e2a04a7e2b7ea5f6f6313dcd4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc619d7d-5f58-4402-a30a-fe05dd9e2922.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13647
x-amzn-requestid: 36276b12-9e02-4d00-a100-9aa5c794fc79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ueEWUoAMFj7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1329-7abb45a85c6bc2235c25d61e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oXeR8DTpEoK8E-BiI7gT4JEIdVBfiimfydNYIC62_rNLlTdem9Buig==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:45:46 GMT
age: 16527
etag: "b0c9391b87a4560598e43d5084dda41e267974a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b3b9022-ae31-4c4b-b4aa-3d82606d5c7c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.3 kB (5276 bytes)
Hash
f0402b0c3474a5bd3b1ba804528b64a8
2d47af0fb664d9fec52549bb3bdba1dfd8911bb2
7f87af77663b8bf22211e135554ada8865cdcf6499e9fcf0f3442b10ca3984e1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b3b9022-ae31-4c4b-b4aa-3d82606d5c7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5276
x-amzn-requestid: d337310e-59be-4268-bfd0-8cc4f2c91a11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_soE98IAMF0aA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-230591591f8fd0984c222549;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x7xrn7E3aUdw75Br3B_GcqRhg-i5FcqG2NRMo4Pa5VhqjblbsvcgDg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:15 GMT
age: 16378
etag: "2d47af0fb664d9fec52549bb3bdba1dfd8911bb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6430 bytes)
Hash
3c36448c65274ebbe1eb21e3bf02385e
e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28
6f17788a394f1305755805a1b92117b1c1a03a1e3a075cb97a0da5184d574553

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6430
x-amzn-requestid: ae2ec151-d383-4554-9ac2-3d204701251c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_ttFDKoAMFp0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1324-15aebb1a06253068472a6ab0;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kYXmy10msfeWdDYgvq0PXyGpy9UJyQkSLAhR_Q5PQMllJPXOOTnalw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:45:53 GMT
age: 16520
etag: "e03cf1c7c2ec15b3cc50d9c54bebbf81aa08cf28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP