| finansforbundet.filemail.com/Frontend/images/backgrounds/123.jpg |  178.21.23.181 | 200 OK | 148 kB |
URL GET finansforbundet.filemail.com/Frontend/images/backgrounds/123.jpg IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x1196, components 3 Size148 kB (147522 bytes) Hashce4b01f14eec04303ae197ada2b93498 f2c2e394d0c19f0f65667305713155cd69f98adf 3752062e361b282a14ad9e9f7cb83e31b1b44cfe9a597cdb0a01faec88f95629
GET /Frontend/images/backgrounds/123.jpg HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/jpeg
Last-Modified: Thu, 20 Mar 2025 06:33:18 GMT
Accept-Ranges: bytes
ETag: "0cb73f76199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 147522
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 |  142.250.74.68 | 200 OK | 102 B |
URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 IP142.250.74.68:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeASCII text, with no line terminators Hash85cf33a7525444b6ca922f12fdb45e9c 5bc107045cce930f2e2ff8a134a52afcb7edb55b 223a644c50bb4e93aee4c2c96ae68188d4bc0b1ba5a10f32293eb32066857a47
GET /recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Fri, 21 Mar 2025 07:30:05 GMT
date: Fri, 21 Mar 2025 07:30:05 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&scrsrc=www.googletagmanager.com&frm=0&rnd=1798471287.1742542204&dt=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&auid=179491913.1742542204&navt=n&npa=1>m=45be53j1v9166926293za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102482433~102788824~102803279~102813109&tft=1742542204479&tfd=1178&apve=1 | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&scrsrc=www.googletagmanager.com&frm=0&rnd=1798471287.1742542204&dt=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&auid=179491913.1742542204&navt=n&npa=1>m=45be53j1v9166926293za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102482433~102788824~102803279~102813109&tft=1742542204479&tfd=1178&apve=1 IP142.250.74.68:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ccm/collect?en=page_view&dl=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&scrsrc=www.googletagmanager.com&frm=0&rnd=1798471287.1742542204&dt=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&auid=179491913.1742542204&navt=n&npa=1>m=45be53j1v9166926293za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102482433~102788824~102803279~102813109&tft=1742542204479&tfd=1178&apve=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 200 OK
content-type: text/plain
expires: Fri, 01 Jan 1990 00:00:00 GMT
date: Fri, 21 Mar 2025 07:30:05 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://finansforbundet.filemail.com
access-control-expose-headers: date,vary,vary,vary,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 | 142.250.74.68 | 200 OK | 72 kB |
URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 IP142.250.74.68:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintB5:4D:C5:27:B4:49:22:F3:21:DF:88:3D:E6:05:D6:A1:02:98:C7:E2 ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeHTML document, ASCII text, with very long lines (56624) Hashd3e964a5946181fa5af31157f20a058c 04e285d24bb805691ad2cee816844fb14dba81df 1067d8d173f63b7b27d6fe67f0c600bea26050a0bae96fdad2e91a3baf5bf034
GET /recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 21 Mar 2025 07:30:05 GMT
content-security-policy: script-src 'nonce-cDzTHGp3-5uVl1_CHsE5xQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.35 | 200 OK | 24 kB |
URL GET fonts.gstatic.com/s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.35:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
GET /s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://finansforbundet.filemail.com/
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:21:41 GMT
expires: Fri, 20 Mar 2026 09:21:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Jul 2019 03:45:47 GMT
content-type: font/woff2
age: 79704
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| finansforbundet.filemail.com/images/logo/logo.svg | 178.21.23.181 | 200 OK | 3.9 kB |
URL GET finansforbundet.filemail.com/images/logo/logo.svg IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4b61179f208ae26bcb2ed14219bd938d f120b120a05950866fea80e1871b7581ec4f9eed 63a61f7a98e5a45d4d88e94d36cc881d2da94971c62fffd334ef2f3fb91c9720
GET /images/logo/logo.svg HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/svg+xml
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 3949
|
|
| finansforbundet.filemail.com/images/favicons/favicon-16x16.png | 178.21.23.181 | 200 OK | 510 B |
URL GET finansforbundet.filemail.com/images/favicons/favicon-16x16.png IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash01123ca0dfc1c2f4207cb837f757a1d8 1fa75564250bae0b8bbe9228c82d03b4e4e21865 a645f8b6f8af407cf072d99a5009599e169d69af25a9ee0c963ff004bc1ddc7c
GET /images/favicons/favicon-16x16.png HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/png
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 510
|
|
| www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css | 142.250.74.99 | 200 OK | 79 kB |
URL GET www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash6af145664eb7177b2280dffa8492731c 1e95f2f04e7b6335081e7cdbdcc48a4654a44ed3 0767863bfde47d05640ad76bd3a33aa5cd7dfba5391e1d80347f7ec41563e404
GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Mar 2025 03:19:46 GMT
expires: Sat, 21 Mar 2026 03:19:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 10 Mar 2025 16:03:14 GMT
content-type: text/css
vary: Accept-Encoding
age: 15019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| js.intercomcdn.com/vendors~app~tooltips.07c9076a.js | 54.240.174.98 | 200 OK | 734 kB |
URL GET js.intercomcdn.com/vendors~app~tooltips.07c9076a.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
Size734 kB (734475 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vendors~app~tooltips.07c9076a.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 175095
cross-origin-resource-policy: cross-origin
last-modified: Wed, 19 Mar 2025 14:59:56 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: iEenEcYvbBxgLCg6a3Eb4unAJu3lf5M5
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 05:36:18 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "66c1019fea54e40283cf0f62ee2e9f57"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 6843
x-amz-cf-id: TWBMYDA5IcGYFJ-5f1ENDueS7Y2PTVE576jqWFQr8DaFnChQQJ9cag==
|
|
| finansforbundet.filemail.com/bundle/js/common_master-bluemaster_common-anonymous_downloadslim-downloadslim/803b8ab26495d90b680363a5fc8287c0258c37092a23750bfedf56b7e4d8 | 178.21.23.181 | 200 OK | 576 kB |
URL GET finansforbundet.filemail.com/bundle/js/common_master-bluemaster_common-anonymous_downloadslim-downloadslim/803b8ab26495d90b680363a5fc8287c0258c37092a23750bfedf56b7e4d8 IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
Size576 kB (575689 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bundle/js/common_master-bluemaster_common-anonymous_downloadslim-downloadslim/803b8ab26495d90b680363a5fc8287c0258c37092a23750bfedf56b7e4d8 HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=7776000
Content-Type: application/javascript; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 235317
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGQQFNQ5FOJVWC3LQMFXGUZLOEAZDAMRVEAWSAQLOMUQEXQ5YMJSXEICHOVWGI5TJNMQG6ZZAKNXWY5TFNFTSATJOEBBGVQ5YOJXHG5DBMQWCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium |  193.30.119.109 | 200 OK | 16 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGQQFNQ5FOJVWC3LQMFXGUZLOEAZDAMRVEAWSAQLOMUQEXQ5YMJSXEICHOVWGI5TJNMQG6ZZAKNXWY5TFNFTSATJOEBBGVQ5YOJXHG5DBMQWCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hash24cb08fb7b654f801381b0426a168411 ea231b5805325b8da1fc21fdd11285e3178472ab 6ce07fddeabcafb2eb5c2833314864878eedd314b6c7219b4e632f53a58cc574
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGQQFNQ5FOJVWC3LQMFXGUZLOEAZDAMRVEAWSAQLOMUQEXQ5YMJSXEICHOVWGI5TJNMQG6ZZAKNXWY5TFNFTSATJOEBBGVQ5YOJXHG5DBMQWCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 16107
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:18:45 GMT
expires: Fri, 20 Mar 2026 09:18:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 79880
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:12:16 GMT
expires: Thu, 27 Mar 2025 09:12:16 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 80269
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| wss://nexus-websocket-a.intercom.io/pubsub/5-0Yv7E_nLE6MnSISBwGt7xQ_akHSisTROY65RxrJ8_3zLVmLlat6HePmdPE94mTCtLWysxDgikofetek7iWoUyItRIl4ZsjR6CT9z?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor | 35.174.127.31 | 101 Switching Protocols | 0 B |
URL GET wss://nexus-websocket-a.intercom.io/pubsub/5-0Yv7E_nLE6MnSISBwGt7xQ_akHSisTROY65RxrJ8_3zLVmLlat6HePmdPE94mTCtLWysxDgikofetek7iWoUyItRIl4ZsjR6CT9z?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor IP35.174.127.31:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerDigiCert Inc Subject*.intercom.io Fingerprint01:2B:AC:F8:6C:B3:21:F3:1E:37:12:FA:6C:42:1B:9B:02:69:2B:3C ValidityThu, 12 Dec 2024 00:00:00 GMT - Mon, 12 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-0Yv7E_nLE6MnSISBwGt7xQ_akHSisTROY65RxrJ8_3zLVmLlat6HePmdPE94mTCtLWysxDgikofetek7iWoUyItRIl4ZsjR6CT9z?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://finansforbundet.filemail.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: m6C3iMewNI5qBjMrY/zvcw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 21 Mar 2025 07:30:11 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fXEvaPH/sz6Dj1yOZvoBsBnoDKE=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
|
|
| js.intercomcdn.com/app.1eae85ae.js | 54.240.174.98 | 200 OK | 784 kB |
URL GET js.intercomcdn.com/app.1eae85ae.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
Size784 kB (784322 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app.1eae85ae.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 183424
cross-origin-resource-policy: cross-origin
last-modified: Thu, 20 Mar 2025 16:04:12 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: A8z2Yx9IFZ2krZcNpr3ifGaJkL8wPFYT
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:06:55 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "af92874eccddfe1460aaf7be088e08b9"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 5002
x-amz-cf-id: q65_RqWJ5ruZ-0xITDnDlHX-VlMppBH7E1Z9Uk12pUNjLoo0s3H9Qg==
|
|
| finansforbundet.filemail.com/images/logo/logo-horiz.svg | 178.21.23.181 | 200 OK | 8.1 kB |
URL GET finansforbundet.filemail.com/images/logo/logo-horiz.svg IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash56d3f680600556e11b442fecdd801d94 737c80c14072e3284ba148da47fc9e2297861d6d aa2574a17758c89d758da54bd0537719fc6641ab9b8cd0243ac094018d8d68ff
GET /images/logo/logo-horiz.svg HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/svg+xml
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 8105
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGEQFAZLSONYGK23UNF3G2ZLMMRUW4Z3FNYQDEMBSGQWCAS3SNFZXI2LOMUQERQ5YMVTWQLKPNVSGC3BAIZUW4LTEMVYC44DEMY&size=Medium | 193.30.119.109 | 200 OK | 24 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGEQFAZLSONYGK23UNF3G2ZLMMRUW4Z3FNYQDEMBSGQWCAS3SNFZXI2LOMUQERQ5YMVTWQLKPNVSGC3BAIZUW4LTEMVYC44DEMY&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hash034fe4bca18dfd802d9c44ce1a021d46 d73b5a141ccba440a75e7d6a83994c31d2d6496b fa61027c0829a1015a77c4586d7fff86051adf7f83e6e17e4b8e03e352762cc9
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGEQFAZLSONYGK23UNF3G2ZLMMRUW4Z3FNYQDEMBSGQWCAS3SNFZXI2LOMUQERQ5YMVTWQLKPNVSGC3BAIZUW4LTEMVYC44DEMY&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 24429
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| 127.0.0.1:56667/?_=1742542204509 |  0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56667/?_=1742542204509 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542204509 HTTP/1.1
Host: 127.0.0.1:56667
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGIQEC4TCMVUWI43MNFXGUZLOEBXWOIDBOJRGK2LEEB2GS3BAMFWGYZJMEBIGK4RAJ5WGC5RAKNVXK4TEMFWCASDPOBZ4HOBAIFEUILTQMRTA&size=Medium | 193.30.119.109 | 200 OK | 40 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGIQEC4TCMVUWI43MNFXGUZLOEBXWOIDBOJRGK2LEEB2GS3BAMFWGYZJMEBIGK4RAJ5WGC5RAKNVXK4TEMFWCASDPOBZ4HOBAIFEUILTQMRTA&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hash68f6b2cad1f1de82e4b65aa27418e57e d3d2b4abe359bb8c2e62b36806aadc775477d02b 1d30ed3f8a1a25ad8146cf31f2077fae7acdd3918a1ae7cf145749ceea1d79d0
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGIQEC4TCMVUWI43MNFXGUZLOEBXWOIDBOJRGK2LEEB2GS3BAMFWGYZJMEBIGK4RAJ5WGC5RAKNVXK4TEMFWCASDPOBZ4HOBAIFEUILTQMRTA&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 40359
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGUQE63JANRQW4ZDTNXB3Q5DFOQQDEMBSGUQC2ICKMFXCAUTPMFWGIICIMVUWEZLSM4WCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium | 193.30.119.109 | 200 OK | 13 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGUQE63JANRQW4ZDTNXB3Q5DFOQQDEMBSGUQC2ICKMFXCAUTPMFWGIICIMVUWEZLSM4WCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hash254f00c788816755b10006602d44a6c0 ec40f072adfbb0f80e4f224c6087094b119c5b56 e943bcfc91b7f6ed42c7dd5aff0a1f339ddcee4f58f82a621a0889026719def9
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGUQE63JANRQW4ZDTNXB3Q5DFOQQDEMBSGUQC2ICKMFXCAUTPMFWGIICIMVUWEZLSM4WCARTJNZQW443GN5ZGE5LOMRSXILTQMRTA&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 12919
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGYQEM2LOMFXHGZTPOJRHK3TEMV2HGIGDXBVW63TPNVUSAMRQGI2SALJAIFZG4ZJAIZZGKZDSNFVSASGDUVZXIZLJNYWCA3TFON2GYZLEMVZC44DEMY&size=Medium | 193.30.119.109 | 200 OK | 24 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGYQEM2LOMFXHGZTPOJRHK3TEMV2HGIGDXBVW63TPNVUSAMRQGI2SALJAIFZG4ZJAIZZGKZDSNFVSASGDUVZXIZLJNYWCA3TFON2GYZLEMVZC44DEMY&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hashbe6bb37083b168c74e06b1a1a6c1bf7c 875d76454de87fad52f7f74bf4bb3bcea82d895e e97b761263f663ea578b7707e961f06b90eb7112e8e47832755f61e10d1f1ed8
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGYQEM2LOMFXHGZTPOJRHK3TEMV2HGIGDXBVW63TPNVUSAMRQGI2SALJAIFZG4ZJAIZZGKZDSNFVSASGDUVZXIZLJNYWCA3TFON2GYZLEMVZC44DEMY&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 24267
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| 127.0.0.1:56667/?_=1742542209568 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56667/?_=1742542209568 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542209568 HTTP/1.1
Host: 127.0.0.1:56667
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| js.intercomcdn.com/launcher-discovery.a1869a1c.js | 54.240.174.98 | 200 OK | 8.6 kB |
URL GET js.intercomcdn.com/launcher-discovery.a1869a1c.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8813), with no line terminators Hash4fc711f51f404d75f7c059f1e4bce06e 0d5d2525723dec78dab487fa15d65ecd430475e8 f1a375497730f84941a68b10bec7e20b9bdb7c061889005e8ae79cfa570aa4d0
GET /launcher-discovery.a1869a1c.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2680
cross-origin-resource-policy: cross-origin
last-modified: Wed, 19 Mar 2025 14:59:55 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: to0rOfmUXiBeLkDD23n81Di_0Hc8IFeV
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:47:54 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "af59c8e2ac28d93cb2bc089a245ef7a7"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 2662
x-amz-cf-id: vq0ij1kDPtv0ww5WdFppwwMA7M3dXRilKORV9WWpSzGYbbqHH1CjUg==
|
|
| fonts.gstatic.com/s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.35 | 200 OK | 24 kB |
URL GET fonts.gstatic.com/s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.35:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
GET /s/lato/v16/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://finansforbundet.filemail.com/
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:21:41 GMT
expires: Fri, 20 Mar 2026 09:21:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Jul 2019 03:45:47 GMT
content-type: font/woff2
age: 79703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-1039234079 | 142.250.74.136 | 200 OK | 295 kB |
URL GET www.googletagmanager.com/gtag/js?id=AW-1039234079 IP142.250.74.136:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (5343) Size295 kB (294791 bytes) Hash71ee11725bf254376fad4392ce141636 2c8bb181d68edbe21e5bbe2d5a07201e11735adf 2313ed958550c6f95e44c144e28f4745953a2cb800c566a42c25bdd641228e4c
GET /gtag/js?id=AW-1039234079 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 21 Mar 2025 07:30:04 GMT
expires: Fri, 21 Mar 2025 07:30:04 GMT
cache-control: private, max-age=900
last-modified: Fri, 21 Mar 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 103513
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| api-iam.intercom.io/messenger/web/launcher_settings | 34.233.102.105 | 200 OK | 240 B |
URL POST api-iam.intercom.io/messenger/web/launcher_settings IP34.233.102.105:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercom.com Fingerprint40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E ValiditySat, 14 Dec 2024 00:00:00 GMT - Sun, 11 Jan 2026 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash313bcb4325fa6c332c3c80ee441b7f5c f71d609555fa018348a1cc041d82694639382ce7 0540f39baa332807b6c21dd0062114f15ab4b63abce6cef76a3226d251d18c4d
POST /messenger/web/launcher_settings HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 418
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 21 Mar 2025 07:30:11 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://finansforbundet.filemail.com
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id
x-intercom-version: ea2242999c7cf22f8c4282f697a050e58473f1ee
content-encoding: gzip
access-control-max-age: 86400
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 000eupumkpdoet91f2b0
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"1fd7fef47b95ffb9ce3174ff36bd2501"
x-runtime: 0.035082
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-07c2e9f913a026b30
X-Firefox-Spdy: h2
|
|
| widget.intercom.io/widget/p41r18ox | 54.240.174.107 | 200 OK | 6.7 kB |
URL GET widget.intercom.io/widget/p41r18ox IP54.240.174.107:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercom.com Fingerprint40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E ValiditySat, 14 Dec 2024 00:00:00 GMT - Sun, 11 Jan 2026 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6938), with no line terminators Hash7ae5a924ea0e57877ad3a6be64ca9e9d 6c83d92fae228f6ec203f251801ddacfc9ff261b 8606cc315b58ed794ea0e6b7e4154b7a5188bb136c33d073b1c075f3b763f83d
GET /widget/p41r18ox HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2673
last-modified: Thu, 20 Mar 2025 16:06:52 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: slwjC9rxMCzi7qO5eVqIxnJTTO73EBeb
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 07:29:12 GMT
cache-control: max-age=300, s-maxage=300, public
etag: "8474db48b80f7726f440713df649e168"
x-cache: Error from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: UXBoAm5Sih7gOSxi4mUO8v4rXhN6m9HhLJkrBh_tR65TQDLRlA5IgA==
age: 59
cross-origin-resource-policy: cross-origin
vary: accept-encoding, Origin
X-Firefox-Spdy: h2
|
|
| js.intercomcdn.com/vendor.370d3c70.js | 54.240.174.98 | 200 OK | 672 kB |
URL GET js.intercomcdn.com/vendor.370d3c70.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
Size672 kB (672455 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vendor.370d3c70.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 208547
last-modified: Wed, 19 Mar 2025 14:59:56 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: iOXCnAX46JIhVkJTS.4OyCLFctNg6QlE
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:26:01 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "1cf73ba4c2dc14b585f70801c595cdec"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vRLtPHpm-9toNLLWAxJTwNmi1K553I8hMoKKNfcVurEKg_pFXSe70g==
age: 3850
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 09:35:39 GMT
expires: Fri, 20 Mar 2026 09:35:39 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 78866
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| filemailprod.blob.core.windows.net/logos/3405145608Medium.png?_=1603102444546 | 20.60.27.132 | 200 OK | 7.6 kB |
URL GET filemailprod.blob.core.windows.net/logos/3405145608Medium.png?_=1603102444546 IP20.60.27.132:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerMicrosoft Corporation Subject*.blob.core.windows.net FingerprintD7:DA:91:92:C7:CF:7C:CB:04:2C:CD:1B:99:7B:BF:A7:BA:23:45:41 ValidityMon, 27 Jan 2025 08:02:11 GMT - Sat, 26 Jul 2025 08:02:11 GMT
File typePNG image data, 287 x 80, 8-bit/color RGBA, non-interlaced Hashb2d6ea94da75403b28967b583b22dd53 b27e48a02bfd768ca6d99f9de1dde0945aa2c7c6 5a8d6a951aaa9a73a468530597963d61d3c28e6bf6c784516c625c53f1f77e65
GET /logos/3405145608Medium.png?_=1603102444546 HTTP/1.1
Host: filemailprod.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 7610
Content-Type: image/png
Content-MD5: stbqlNp1QDsolntYOyLdUw==
Last-Modified: Tue, 24 Nov 2020 21:00:44 GMT
ETag: 0x8D890BC02A536F2
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a927d385-001e-007f-6533-9a25d9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Fri, 21 Mar 2025 07:30:03 GMT
|
|
| finansforbundet.filemail.com/images/recoverdata.png | 178.21.23.181 | 200 OK | 4.3 kB |
URL GET finansforbundet.filemail.com/images/recoverdata.png IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typePNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced Hashef7625323f338377be337a7c64bb0fa3 b1161e24df45116179a6e62d8170d6825737b73a 683ad070abc84a94e6d91034eba90e05f7a81b35752f9e45e5fdeef8198049bc
GET /images/recoverdata.png HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/png
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 4287
|
|
| 127.0.0.1:56666/?_=1742542214569 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56666/?_=1742542214569 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542214569 HTTP/1.1
Host: 127.0.0.1:56666
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 127.0.0.1:56666/?_=1742542219568 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56666/?_=1742542219568 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542219568 HTTP/1.1
Host: 127.0.0.1:56666
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| analytics.filemail.com/js/container_UpE19V8Y.js | 20.82.124.160 | 200 OK | 120 kB |
URL GET analytics.filemail.com/js/container_UpE19V8Y.js IP20.82.124.160:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1601) Size120 kB (119660 bytes) Hashec20fa9dbef84d6dcad1de79f83b97a5 4db1927e0c9774f57a1b7da9478f1dbb40abbaf0 59da467d9655a2621cb1ba3c83f9c4d247531ee39136b694c677e9de95e1d7ae
GET /js/container_UpE19V8Y.js HTTP/1.1
Host: analytics.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 34613
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 19 Dec 2023 06:37:17 GMT
accept-ranges: bytes
etag: "808c20cf4532da1:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
date: Fri, 21 Mar 2025 07:30:03 GMT
X-Firefox-Spdy: h2
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQG4QFA33MNF2GS43LEBYHE33HOJQW2IBSGAZDKLJSGAZDQIBNEBJXMZLOEBCWSZDFFQQEM2LOMFXHGZTPOJRHK3TEMV2C44DEMY&size=Medium | 193.30.119.109 | 200 OK | 23 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQG4QFA33MNF2GS43LEBYHE33HOJQW2IBSGAZDKLJSGAZDQIBNEBJXMZLOEBCWSZDFFQQEM2LOMFXHGZTPOJRHK3TEMV2C44DEMY&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x338, components 3 Hashd0bcc2450362621aa8c659cacae3f877 bcd8412527052c2950856b42868f71a8a9dd4baf 9f8d742a31985f8a885725a3489947f890d03c61f116f8517ec67ff96579b4ec
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQG4QFA33MNF2GS43LEBYHE33HOJQW2IBSGAZDKLJSGAZDQIBNEBJXMZLOEBCWSZDFFQQEM2LOMFXHGZTPOJRHK3TEMV2C44DEMY&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 22613
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| filemail.b-cdn.net/webapp/fonts/fa-light-300.woff2 | 194.242.11.186 | 200 OK | 157 kB |
URL GET filemail.b-cdn.net/webapp/fonts/fa-light-300.woff2 IP194.242.11.186:443 ASN#34989 ServeTheWorld AS
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.b-cdn.net FingerprintBD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21 ValidityTue, 05 Nov 2024 00:00:00 GMT - Tue, 11 Nov 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 156892, version 329.30932 Size157 kB (156892 bytes) Hash67cf9b9845e2bf8be3dba8a93fa07134 0f4206b598d042b62d3aad26a3126c3ba0ddfcf7 082425ce63442064f2acd182fcdac79ecbebdbfe2e392493ac9b1dc71a5c1842
GET /webapp/fonts/fa-light-300.woff2 HTTP/1.1
Host: filemail.b-cdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://finansforbundet.filemail.com/
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 21 Mar 2025 07:30:04 GMT
content-type: font/woff2
content-length: 156892
server: BunnyCDN-NO1-830
cdn-pullzone: 1684768
cdn-uid: 87d26d0a-dd6e-4ed6-8a49-4925c3ae11b2
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Thu, 19 Dec 2024 15:18:19 GMT
cdn-storageserver: SE-582
cdn-fileserver: 808
cdn-proxyver: 1.19
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 02/20/2025 22:56:56
cdn-edgestorageid: 830
cdn-requestid: 5d337eabc322f3774e066b4339fb0b9b
cdn-cache: HIT
cdn-status: 200
cdn-requesttime: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 127.0.0.1:56666/?_=1742542204509 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56666/?_=1742542204509 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542204509 HTTP/1.1
Host: 127.0.0.1:56666
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| js.intercomcdn.com/vendors~app.10d78236.js | 54.240.174.98 | 200 OK | 544 kB |
URL GET js.intercomcdn.com/vendors~app.10d78236.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
Size544 kB (543593 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vendors~app.10d78236.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 110885
cross-origin-resource-policy: cross-origin
last-modified: Wed, 19 Mar 2025 14:59:56 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: BI2VYaeMjY.7he7I3itdU1Cl4dLW0R1T
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:11:56 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "187b542f53c7acf47ebe3df2f31eb641"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 4701
x-amz-cf-id: vt97kXbp6GAuQNLjxXLcxKLo9D3CqO2zJlOjs2QA6Gl6vPPLvZ6cjA==
|
|
| www.google.com/recaptcha/api.js?render=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&onload=__recaptchaCallback | 142.250.74.68 | 200 OK | 1.0 kB |
URL GET www.google.com/recaptcha/api.js?render=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&onload=__recaptchaCallback IP142.250.74.68:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C ValidityMon, 10 Mar 2025 08:37:46 GMT - Mon, 02 Jun 2025 08:37:45 GMT
File typeJavaScript source, ASCII text, with very long lines (1007), with no line terminators Hash2ed89f00024c2b18682da8f507d6697a 2f6c4d861737de3eb7068e1eedcbed7660e3bc22 a1879cc883bc51cec63ea96bfa69cf15838c1145ce0f05e70c5f1c37042008c3
GET /recaptcha/api.js?render=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&onload=__recaptchaCallback HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 21 Mar 2025 07:30:04 GMT
date: Fri, 21 Mar 2025 07:30:04 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| finansforbundet.filemail.com/api/transfer/get | 178.21.23.181 | 200 OK | 17 kB |
URL POST finansforbundet.filemail.com/api/transfer/get IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/transfer/get HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Content-Type: application/x-www-form-urlencoded
Source: Web
Content-Length: 73
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Vary: Origin,Accept-Encoding
Access-Control-Allow-Origin: https://finansforbundet.filemail.com
Access-Control-Request-Method: GET POST OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token, Source
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:04 GMT
Content-Length: 4607
|
|
| 127.0.0.1:56667/?_=1742542214569 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56667/?_=1742542214569 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542214569 HTTP/1.1
Host: 127.0.0.1:56667
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 127.0.0.1:56666/?_=1742542209568 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56666/?_=1742542209568 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542209568 HTTP/1.1
Host: 127.0.0.1:56666
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| finansforbundet.filemail.com/api/internal/languageusage/report | 178.21.23.181 | 200 OK | 30 B |
URL POST finansforbundet.filemail.com/api/internal/languageusage/report IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5ea0457000c1b9041be8343c1206ed0a 938bd23f664c1b1b249366a0b231644ad8200da2 2a504487f6a4eea32fae09f4862e0caa4bfb894c9722f69b574db8290f2e68f9
POST /api/internal/languageusage/report HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Source: Web
X-Requested-With: XMLHttpRequest
Content-Length: 357
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204; intercom-id-p41r18ox=a299da50-cee6-44f6-8fbb-a2f3eda9b980; intercom-session-p41r18ox=; intercom-device-id-p41r18ox=6d483237-a318-41c7-a1a2-6f8f038b1d59
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-store
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Vary: Origin,Accept-Encoding
Access-Control-Allow-Origin: https://finansforbundet.filemail.com
Access-Control-Request-Method: GET POST OPTIONS
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-CSRF-Token, Source
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:14 GMT
Content-Length: 150
|
|
| api-iam.intercom.io/messenger/web/ping | 34.233.102.105 | 200 OK | 4.4 kB |
URL POST api-iam.intercom.io/messenger/web/ping IP34.233.102.105:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercom.com Fingerprint40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E ValiditySat, 14 Dec 2024 00:00:00 GMT - Sun, 11 Jan 2026 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4759), with no line terminators Hash09a5d5a2266b544de70685f8f8ebd7f7 53547c5c6bbb94a828122de4a20e3456ad6de6b0 af3edfd0217e0ca568b309985ede79d39dbdc43b5413e99b15426cbc5fddbd3f
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 558
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 21 Mar 2025 07:30:11 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://finansforbundet.filemail.com
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id
x-intercom-version: ea2242999c7cf22f8c4282f697a050e58473f1ee
content-encoding: gzip
access-control-max-age: 86400
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 001svgtqsqp7tc5c1e60
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"9a7a80f17d3731b7649be98fef8a3fae"
x-runtime: 0.198335
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-07c2e9f913a026b30
X-Firefox-Spdy: h2
|
|
| finansforbundet.filemail.com/d/yhqywgdkxzccgdp | 178.21.23.181 | 200 OK | 244 kB |
URL User Request GET finansforbundet.filemail.com/d/yhqywgdkxzccgdp IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (63058), with CRLF line terminators Size244 kB (244507 bytes) Hash4f5e91039b861e51d1a7f2dc6a2ab4b3 7d524ea3020112006a0bb23e374699b121e857a2 bc759209611813e3b00b3f77d473cbb1a7abf80d6a7b885acf4e3a24aca84cdc
GET /d/yhqywgdkxzccgdp HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Language: en
Vary: Accept-Encoding
Set-Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; path=/; secure; HttpOnly; SameSite=Lax
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: frame-ancestors 'none';report-to csp-endpoint
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; usb 'none'; sync-xhr 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 83095
|
|
| finansforbundet.filemail.com/Frontend/images/backgrounds/051.jpg | 178.21.23.181 | 200 OK | 223 kB |
URL GET finansforbundet.filemail.com/Frontend/images/backgrounds/051.jpg IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x1200, components 3 Size223 kB (222809 bytes) Hash3e183afac4991f6a81cd7f110e8aa1f5 b8b96caf5006afbb0c7899bbc9f63d28a6285743 9e466d70e18c6025eb47251f0359eea3633065f6c479874708da38ea14bda648
GET /Frontend/images/backgrounds/051.jpg HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/jpeg
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:08 GMT
Content-Length: 222809
|
|
| www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js | 142.250.74.99 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size559 kB (558604 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220830
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Mar 2025 04:28:18 GMT
expires: Sat, 21 Mar 2026 04:28:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 10 Mar 2025 16:03:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 10907
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| js.intercomcdn.com/frame.512ab2ca.js | 54.240.174.98 | 200 OK | 926 kB |
URL GET js.intercomcdn.com/frame.512ab2ca.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65464) Size926 kB (926320 bytes) Hashce51876983cb2506bcecd23b0188b2ab e21c344640d3fd5ee571bff85e1cf46088834ae3 d0d4050fe3234edbe514a2747c7644e4e2b536b7fd359e4a95af99ef11d6c0c4
GET /frame.512ab2ca.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 199433
last-modified: Thu, 20 Mar 2025 16:04:12 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: jhOCGrG2nMacbgc_ISUUZPlEkRjtReUc
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:06:55 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "03464921efd9cc87d6cbb306bc406369"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: y9AJHzwyn3rKY0-gI_bEjzOr6Jm0-fRpCSrvbyXnIu3ku-z9uHbeWw==
age: 4996
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| 127.0.0.1:56667/?_=1742542219568 | 0.0.0.0 | | 0 B |
URL GET 127.0.0.1:56667/?_=1742542219568 IP0.0.0.0:0
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_=1742542219568 HTTP/1.1
Host: 127.0.0.1:56667
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| finansforbundet.filemail.com/Frontend/angular/download/downloadDetails.template.html?_v=1.9917.0.1 | 178.21.23.181 | 200 OK | 17 kB |
URL GET finansforbundet.filemail.com/Frontend/angular/download/downloadDetails.template.html?_v=1.9917.0.1 IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Frontend/angular/download/downloadDetails.template.html?_v=1.9917.0.1 HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
Source: Web
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
Vary: Accept-Encoding
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 3828
|
|
| 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGMQECSJAMFXGIIDBNRTW64TJORUG22LDEBWWC3TBM5SW2ZLOOQQGS3RAMZUW4YLOMNSSBYUASMQHI2DSMVQXI4ZAMFXGIIDPOBYG64TUOVXGS5DJMVZSYICLMFZXAZLSEBCWI53BOJSHGLTQMRTA&size=Medium | 193.30.119.109 | 200 OK | 32 kB |
URL GET 3009.filemail.com/getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGMQECSJAMFXGIIDBNRTW64TJORUG22LDEBWWC3TBM5SW2ZLOOQQGS3RAMZUW4YLOMNSSBYUASMQHI2DSMVQXI4ZAMFXGIIDPOBYG64TUOVXGS5DJMVZSYICLMFZXAZLSEBCWI53BOJSHGLTQMRTA&size=Medium IP193.30.119.109:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x424, components 3 Hashd2c2e9fbed090d1de3281aebda4ae7a6 79349f29fdac05ef7c7cde536bd1908a3f21f286 19a4f19b9077b953047309be59000ed78a1c1163d36179db9fc56a0af12e7003
GET /getthumbnail.ashx?fileid=PFUHC6LXM5SGW6D2MNRWOZDQPR6HYUDSMVZWK3TUMFZWU33OMVZCA5WDUVZGW33OMZSXEYLOONSW4IBSGAZDKLZQGMQECSJAMFXGIIDBNRTW64TJORUG22LDEBWWC3TBM5SW2ZLOOQQGS3RAMZUW4YLOMNSSBYUASMQHI2DSMVQXI4ZAMFXGIIDPOBYG64TUOVXGS5DJMVZSYICLMFZXAZLSEBCWI53BOJSHGLTQMRTA&size=Medium HTTP/1.1
Host: 3009.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1; _gcl_au=1.1.179491913.1742542204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=604800
Content-Length: 31926
Content-Type: image/jpeg
Date: Fri, 21 Mar 2025 07:30:04 GMT
|
|
| finansforbundet.filemail.com/bundle/css/bluemaster-later/c02c46bc5d30f01 | 178.21.23.181 | 200 OK | 141 kB |
URL GET finansforbundet.filemail.com/bundle/css/bluemaster-later/c02c46bc5d30f01 IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
Size141 kB (141015 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bundle/css/bluemaster-later/c02c46bc5d30f01 HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=7776000
Content-Type: text/css; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 36028
|
|
| www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js | 142.250.74.99 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfiE5ocAAAAAPIxSggV1OLpAwQcnEJPbS7aqwNp&co=aHR0cHM6Ly9maW5hbnNmb3JidW5kZXQuZmlsZW1haWwuY29tOjQ0Mw..&hl=en&v=J79K9xgfxwT6Syzx-UyWdD89&size=invisible&cb=uk58cvc3a6o1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size559 kB (558604 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220830
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Mar 2025 04:28:18 GMT
expires: Sat, 21 Mar 2026 04:28:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 10 Mar 2025 16:03:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 10907
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| finansforbundet.filemail.com/images/favicons/apple-touch-icon.png | 178.21.23.181 | 200 OK | 2.6 kB |
URL GET finansforbundet.filemail.com/images/favicons/apple-touch-icon.png IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit colormap, non-interlaced Hashf81f79f4269058295eb08459765f3d10 60eaf9370ace39aa798468d98a15d7768713174e 363e0362deae7b5412a53ea38144ae8d7255be760d0504f106392a2eb30d2630
GET /images/favicons/apple-touch-icon.png HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868; _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: image/png
Last-Modified: Thu, 20 Mar 2025 06:33:16 GMT
Accept-Ranges: bytes
ETag: "09e42f66199db1:0"
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 2593
|
|
| www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js | 142.250.74.99 | 200 OK | 559 kB |
URL GET www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
Size559 kB (558604 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 220830
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Mar 2025 04:28:18 GMT
expires: Sat, 21 Mar 2026 04:28:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 10 Mar 2025 16:03:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 10906
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.intercomcdn.com/app~tooltips.64763932.js | 54.240.174.98 | 200 OK | 313 kB |
URL GET js.intercomcdn.com/app~tooltips.64763932.js IP54.240.174.98:443
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintD2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B ValidityThu, 31 Oct 2024 00:00:00 GMT - Fri, 28 Nov 2025 23:59:59 GMT
Size313 kB (313055 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app~tooltips.64763932.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://finansforbundet.filemail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 70999
cross-origin-resource-policy: cross-origin
last-modified: Wed, 19 Mar 2025 14:59:55 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: mbhZsQGBPib9QnNqFusewAqDj.K4yrVn
accept-ranges: bytes
server: AmazonS3
date: Fri, 21 Mar 2025 06:01:00 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "fa4c7530fdd66aafce8da59c451275f5"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 5358
x-amz-cf-id: Mj1P3GYcO2BvSr896dPTSFEaf9OLMWa5p_r2M8DTP_DY0YrsSg6uBg==
|
|
| finansforbundet.filemail.com/Frontend/css/fontspreload.css | 178.21.23.181 | 200 OK | 2.4 kB |
URL GET finansforbundet.filemail.com/Frontend/css/fontspreload.css IP178.21.23.181:443 ASN#50673 Serverius Holding B.V.
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (2531), with no line terminators Hash857dbaaf6449fb7e391608ab105becb9 d94adc7b368cf29450057dacbdfc9d3a9622702e 45090dba444692ce95547f6b22cea91a07718fa7a626fc0f4f55a30daafa2c9e
GET /Frontend/css/fontspreload.css HTTP/1.1
Host: finansforbundet.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/d/yhqywgdkxzccgdp
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=cg0yf1sudiryzwojvtu3x43a; resources_cached=en-us.1742542203868
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=604800
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 20 Mar 2025 06:33:12 GMT
Accept-Ranges: bytes
ETag: "044e0f36199db1:0"
Vary: Accept-Encoding
X-Robots-Tag: none
Reporting-Endpoints: csp-endpoint="https://www.filemail.com/api/csp/report"
Report-To: { "group": "csp-endpoint", "max-age": 10886400, "endpoints": [{ "url": "https://www.filemail.com/api/csp/report" }] }
Content-Security-Policy: report-to csp-endpoint
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
Date: Fri, 21 Mar 2025 07:30:03 GMT
Content-Length: 1022
|
|
| analytics.filemail.com/matomo.php?action_name=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&idsite=1&rec=1&r=423985&h=7&m=30&s=4&url=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&_id=bb5834faeee20778&_idn=1&send_image=0&_refts=0&pv_id=yMS3zF&pf_net=190&pf_srv=146&pf_tfr=94&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 | 20.82.124.160 | 204 No Content | 0 B |
URL POST analytics.filemail.com/matomo.php?action_name=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&idsite=1&rec=1&r=423985&h=7&m=30&s=4&url=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&_id=bb5834faeee20778&_idn=1&send_image=0&_refts=0&pv_id=yMS3zF&pf_net=190&pf_srv=146&pf_tfr=94&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 IP20.82.124.160:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://finansforbundet.filemail.com/d/yhqywgdkxzccgdp CertificateIssuerSectigo Limited Subject*.filemail.com Fingerprint1B:28:1A:EF:A4:63:E7:13:C9:A8:87:90:69:B9:12:41:1C:2F:3C:57 ValidityFri, 20 Dec 2024 00:00:00 GMT - Sat, 20 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=Finansforbundet%20-%20Presentasjoner%20v%C3%A5rkonferansen%202025&idsite=1&rec=1&r=423985&h=7&m=30&s=4&url=https%3A%2F%2Ffinansforbundet.filemail.com%2Fd%2Fyhqywgdkxzccgdp&_id=bb5834faeee20778&_idn=1&send_image=0&_refts=0&pv_id=yMS3zF&pf_net=190&pf_srv=146&pf_tfr=94&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1
Host: analytics.filemail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finansforbundet.filemail.com/
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://finansforbundet.filemail.com
DNT: 1
Connection: keep-alive
Cookie: _pk_id.1.c4fe=bb5834faeee20778.1742542204.; _pk_ses.1.c4fe=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
vary: Origin
server: Microsoft-IIS/10.0
x-powered-by: PHP/8.2.5
tk: N
access-control-allow-origin: https://finansforbundet.filemail.com
access-control-allow-credentials: true
date: Fri, 21 Mar 2025 07:30:03 GMT
X-Firefox-Spdy: h2
|
|