Resultaat

Taak-URL: https://e54f61ze6f.wildapricot.org/resources/EmailTemplates/Offer.html#cl/1217731_smd/140/468890/6025/1740/159308

Verdacht niveau: Vermoedelijk gevaarlijk

Beschrijving: Deze pagina bevat een script dat probeert om jezelf om te leiden, wat kan duiden op kwaadwillende intenties.

Statistieken

3 2 3 3 4 2

Screenshot

Screenshot Thumbnail

HTML data

Lengte Actie
235

DOM data

Lengte Actie
235

IP adressen

IP Adres Gerelateerd Domein Bron Type
34.226.77.200 e54f61ze6f.wildapricot.org Web Request
176.97.124.169 fosster.online Web Request
34.226.77.200 e54f61ze6f.wildapricot.org NSLookup
176.97.124.169 fosster.online NSLookup

Verwijzingen

Requestid Verwijzing Bestemming
38A6340D651518ECC9A6B535AF113368 http://fosster.online/cl/0_smt/140/001/6025/0/0 https://fosster.online/cl/0_smt/140/001/6025/0/0
38A6340D651518ECC9A6B535AF113368 https://fosster.online/cl/0_smt/140/001/6025/0/0 http://fosster.online/cl/0_smt/140/001/6025/0/0

Downloads

Bestandsnaam SHA256 | URL
Offer.html bdb2d79fa115e02bd2ef757ac54cdffd5ce00e060d8c77b977413d2aae95a202 94 Bytes | 200 https://e54f61ze6f.wildapricot.org/resources/EmailTemplates/Offer.html
favicon.ico 93717cbb1e4b19d357d17b404be3741a04516ed7408d557bb2b8d44a3e20472c 15086 Bytes | 200 https://e54f61ze6f.wildapricot.org/favicon.ico
0 6755fbcbb8c393a2103ae55b12669295a83112b019193f2e51f661e430e6c2d9 197 Bytes | 200 http://fosster.online/cl/0_smt/140/001/6025/0/0

Detectie

Tijdstempel Detectieregel Type Item
2025-03-12T09:30:13.263289+00:00 html_redirect_client_not_authorized_001 HTML
2025-03-12T09:30:13.259121+00:00 nl_url_phishing_structuur_001 URL http://fosster.online/cl/0_smt/140/001/6025/0/0

Verzoeken

Request 3753 https://e54f61ze6f.wildapricot.org/resources/EmailTemplates/Offer.html

Domein: e54f61ze6f.wildapricot.org

Methode: GET Bron: Document Status: 200

Request 3754 https://e54f61ze6f.wildapricot.org/favicon.ico

Domein: e54f61ze6f.wildapricot.org

Methode: GET Bron: Other Status: 200

Request 3755 http://fosster.online/cl/0_smt/140/001/6025/0/0

Domein: fosster.online

Methode: GET Bron: Document Status: 200

Antwoorden

Response 3766 https://e54f61ze6f.wildapricot.org/resources/EmailTemplates/Offer.html

Status: 200 OK

Mime: text/html | Charset:

Remote IP: 34.226.77.200:443 | Protocol: http/1.1

Beveiligingsstatus: secure | Uitgever: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Headers:

{"Accept-Ranges":"bytes","Cache-Control":"public","Connection":"close","Content-Disposition":"filename=\"Offer.html\";","Content-Encoding":"gzip","Content-Security-Policy":"report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.appointlet.com *.appointletcdn.com *.aptrinsic.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.ecomm.events *.ecwid.com *.elev.io *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.linkedin.com *.mcjobboard.net *.mybillsystem.com *.newrelic.com *.nr-data.net *.pagespeed-mod.com *.paypal.com *.termly.io *.twitter.com *.typekit.net *.uservoice.com *.wildapricot.com *.youtube.com *.zdassets.com *.zendesk.com *.zopim.com caas-sf.wildapricot.org https://*.forethought.ai live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/;   img-src * data: blob:;   media-src * blob:;   font-src * https://*.aptrinsic.com data:;","Content-Type":"text/html","Date":"Wed, 12 Mar 2025 09:30:08 GMT","Last-Modified":"Fri, 31 Jan 2025 13:55:36 GMT","P3P":"CP=\"CAO PSA OUR\"","Reporting-Endpoints":"wildapricot-csp-uel='https://csp.uel.wildapricot.com/report'","Strict-Transport-Security":"max-age=31536000","Transfer-Encoding":"chunked","X-Backend-Server":"lwf2wue1c-cd14","X-Content-Type-Options":"nosniff","X-LB-Server":"llblue1c-3a4b","X-UA-Compatible":"IE=10"}
Response 3767 https://e54f61ze6f.wildapricot.org/favicon.ico

Status: 200 OK

Mime: image/x-icon | Charset:

Remote IP: 34.226.77.200:443 | Protocol: http/1.1

Beveiligingsstatus: secure | Uitgever: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Headers:

{"Accept-Ranges":"bytes","Cache-Control":"public,max-age=31536000","Connection":"close","Content-Length":"15086","Content-Security-Policy":"report-uri https://csp.uel.wildapricot.com/report; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.appointlet.com *.appointletcdn.com *.aptrinsic.com *.cloudflare.com *.cloudfront.net *.doubleclick.net *.ecomm.events *.ecwid.com *.elev.io *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.linkedin.com *.mcjobboard.net *.mybillsystem.com *.newrelic.com *.nr-data.net *.pagespeed-mod.com *.paypal.com *.termly.io *.twitter.com *.typekit.net *.uservoice.com *.wildapricot.com *.youtube.com *.zdassets.com *.zendesk.com *.zopim.com caas-sf.wildapricot.org https://*.forethought.ai live-sf.wildapricot.org maps.googleapis.com onlinestore-prod-digital-products.s3.amazonaws.com sf.wildapricot.org vimeo.com widget-mediator.zopim.com wss://widget-mediator.zopim.com/;   img-src * data: blob:;   media-src * blob:;   font-src * https://*.aptrinsic.com data:;","Content-Type":"image/x-icon","Date":"Wed, 12 Mar 2025 09:30:07 GMT","ETag":"\"f5ed8d526c8cdb1:0\"","Last-Modified":"Mon, 03 Mar 2025 18:44:40 GMT","P3P":"CP=\"CAO PSA OUR\"","Reporting-Endpoints":"wildapricot-csp-uel='https://csp.uel.wildapricot.com/report'","Strict-Transport-Security":"max-age=31536000","X-Backend-Server":"lwf2wue1d-1736","X-Content-Type-Options":"nosniff","X-LB-Server":"llblue1c-3a4b","X-UA-Compatible":"IE=10"}
Response 3768 http://fosster.online/cl/0_smt/140/001/6025/0/0

Status: 200 OK

Mime: text/html | Charset: UTF-8

Remote IP: 176.97.124.169:80 | Protocol: http/1.1

Beveiligingsstatus: insecure | Uitgever:

Headers:

{"Cache-Control":"max-age=2592000","Connection":"Keep-Alive","Content-Type":"text/html; charset=UTF-8","Date":"Wed, 12 Mar 2025 09:30:08 GMT","Expires":"Fri, 11 Apr 2025 09:30:08 GMT","Keep-Alive":"timeout=5, max=100","Server":"Apache/2.4.57 (Rocky Linux) OpenSSL/3.0.7","Transfer-Encoding":"chunked","X-Powered-By":"PHP/8.0.30"}