| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/bannerlogo |  85.10.159.56 | 200 OK | 5.6 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/bannerlogo IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typePNG image data, 280 x 60, 8-bit/color RGB, non-interlaced\012- data Hashe0310f2802a3fba55c2661e5ad9f127d ac38722d92b5c077af82914ac22d24a566db89ee ee5b79e29d62b9c34232e6faadbd940edadac749663b19fcbe04cbcea00243fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/bannerlogo HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-length: 5647
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: "160f-5b9aa0f54cc68"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js |  142.250.74.74 | 200 OK | 31 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP142.250.74.74:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 03:01:51 GMT
expires: Fri, 22 Nov 2024 03:01:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 427529
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| secure.aadcdn.microsoftonline-p.com/c1c6b6c8-hjnu12-pkjyjcivrlnkdxwphn0lnqaqqm2ivhwwg2ce/logintenantbranding/0/illustration?ts=636923089163613975 |  104.110.25.85 | 200 OK | 298 kB |
URL GET HTTP/1.1secure.aadcdn.microsoftonline-p.com/c1c6b6c8-hjnu12-pkjyjcivrlnkdxwphn0lnqaqqm2ivhwwg2ce/logintenantbranding/0/illustration?ts=636923089163613975 IP104.110.25.85:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerMicrosoft Corporation Subjectsecure.aadcdn.microsoftonline-p.com FingerprintAB:05:6B:A1:99:95:2B:A9:17:7E:0A:2D:4C:03:7B:0F:57:5A:32:58 ValidityThu, 14 Sep 2023 11:06:22 GMT - Sun, 08 Sep 2024 11:06:22 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 64x64, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=18, height=7075, bps=0, compression=LZW, PhotometricIntepretation=RGB, description=B 4896vv kassen jan bazen 06-51335128 0174750230, manufacturer=Hasselblad, model=Hasselblad H3D-39, width=10335], baseline, precision 8, 1920x1314, components 3\012- data Size298 kB (298412 bytes) Hash45eae17742baa02f00c51edfe902ed4f c06d3758fccafff4003188ecc5524421de97147f ff5f05e1fc5754e4cb21e0026afd7dee2b231368144b04ab0b23f63bfc47206e
GET /c1c6b6c8-hjnu12-pkjyjcivrlnkdxwphn0lnqaqqm2ivhwwg2ce/logintenantbranding/0/illustration?ts=636923089163613975 HTTP/1.1
Host: secure.aadcdn.microsoftonline-p.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 298412
Content-Type: image/*
Content-MD5: Rerhd0K6oC8AxR7f6QLtTw==
Last-Modified: Wed, 01 May 2019 12:01:56 GMT
Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
Cache-Control: public, max-age=68698
Date: Tue, 28 Nov 2023 01:47:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Access-Control-Allow-Origin: *
|
|
| aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico | 152.199.23.37 | 200 OK | 17 kB |
URL GET HTTP/2aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico IP152.199.23.37:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeMS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data Hash12e3dac858061d088023b2bd48e2fa96 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15635532
cache-control: public, max-age=31536000
content-md5: EuPayFgGHQiAI7K9SOL6lg==
content-type: image/x-icon
date: Tue, 28 Nov 2023 01:47:20 GMT
etag: 0x8D8731240E548EB
last-modified: Sun, 18 Oct 2020 03:02:30 GMT
server: ECAcc (ska/F738)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000
x-ms-version: 2009-09-19
content-length: 17174
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css | 152.199.23.37 | 200 OK | 20 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css IP152.199.23.37:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeASCII text, with very long lines (61177) Hash440ca18024de46b4d73e7540a4fdde46 c4ff7af4e1558e081df52c1e61a5d63d0be577c7 ea6449d448a48495c557755af39701567925ceafc30e06fba05f65e723c91aa3
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15962964
cache-control: public, max-age=31536000
content-md5: +rPQJ6BWMovrMLNrlexvKQ==
content-type: text/css
date: Tue, 28 Nov 2023 01:47:20 GMT
etag: 0x8D88DD061D3546B
last-modified: Sat, 21 Nov 2020 03:49:00 GMT
server: ECAcc (ska/F686)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: ea4b291d-801e-0029-5d6e-9079f6000000
x-ms-version: 2009-09-19
content-length: 19595
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js | 152.199.23.37 | 200 OK | 13 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js IP152.199.23.37:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (32009) Hashcf3b4a0aa232f29091f0fe3342664ee9 1bbfe94be638701a66ee6fbaa64508e846d0171a fcf3159c8789d7b5d1f31855c7f70284e906aaa4a9f66376cba71aee1f18904c
GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 17696
cache-control: public, max-age=31536000
content-md5: k/6U2H/z+Hk3mhE67BfMjg==
content-type: application/x-javascript
date: Tue, 28 Nov 2023 01:47:20 GMT
etag: 0x8D8B274BB4C7165
last-modified: Wed, 06 Jan 2021 18:56:10 GMT
server: ECAcc (ska/F6B4)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 02b2e076-c01e-00c3-7f73-21a364000000
x-ms-version: 2009-09-19
content-length: 12697
X-Firefox-Spdy: h2
|
|
| login.live.com/Me.htm?v=3 |  20.190.177.85 | 200 OK | 1.1 kB |
URL GET HTTP/1.1login.live.com/Me.htm?v=3 IP20.190.177.85:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectlogin.live.com FingerprintF6:95:3F:10:AD:8C:5F:52:2B:86:41:BA:29:A9:7F:BC:47:88:2D:0D ValidityFri, 10 Nov 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (2345), with CRLF line terminators Hashe86ef8b6111e5fb1d1665bcdc90888c9 994bf7651cb967cd9053056af2d69acb74db7f29 3410242720de50b090d07a23aee2dad879b31d36f2615732962ec4cfa8a9d458
GET /Me.htm?v=3 HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=315360000
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Fri, 25 Nov 2033 01:47:20 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C107_BL2
x-ms-request-id: 354342ca-c42c-41ae-8dcc-932889da131d
PPServer: PPV: 30 H: BL02EPF00006776 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=a7c047256a27491cb3e58720092a1b9c; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=N<=1701136040&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Tue, 28 Nov 2023 01:47:19 GMT
Content-Length: 1132
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js | 152.199.23.37 | 200 OK | 13 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js IP152.199.23.37:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (32009) Hashcf3b4a0aa232f29091f0fe3342664ee9 1bbfe94be638701a66ee6fbaa64508e846d0171a fcf3159c8789d7b5d1f31855c7f70284e906aaa4a9f66376cba71aee1f18904c
GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-nl.min_zztkcqiy8pcr8p4zqmzo6q2.js HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://security.royalbrlnkman.com/
Origin: https://security.royalbrlnkman.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
age: 17701
cache-control: public, max-age=31536000
content-md5: k/6U2H/z+Hk3mhE67BfMjg==
content-type: application/x-javascript
date: Tue, 28 Nov 2023 01:47:25 GMT
etag: 0x8D8B274BB4C7165
last-modified: Wed, 06 Jan 2021 18:56:10 GMT
server: ECAcc (ska/F6B4)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 02b2e076-c01e-00c3-7f73-21a364000000
x-ms-version: 2009-09-19
content-length: 12697
X-Firefox-Spdy: h2
|
|
| aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css | 152.199.23.37 | 200 OK | 20 kB |
URL GET HTTP/2aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css IP152.199.23.37:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerDigiCert Inc Subjectaadcdn.msftauth.net Fingerprint99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6 ValidityTue, 31 Jan 2023 00:00:00 GMT - Wed, 31 Jan 2024 23:59:59 GMT
File typeASCII text, with very long lines (61177) Hash440ca18024de46b4d73e7540a4fdde46 c4ff7af4e1558e081df52c1e61a5d63d0be577c7 ea6449d448a48495c557755af39701567925ceafc30e06fba05f65e723c91aa3
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css HTTP/1.1
Host: aadcdn.msftauth.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://security.royalbrlnkman.com/
Origin: https://security.royalbrlnkman.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 15962969
cache-control: public, max-age=31536000
content-md5: +rPQJ6BWMovrMLNrlexvKQ==
content-type: text/css
date: Tue, 28 Nov 2023 01:47:25 GMT
etag: 0x8D88DD061D3546B
last-modified: Sat, 21 Nov 2020 03:49:00 GMT
server: ECAcc (ska/F686)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: ea4b291d-801e-0029-5d6e-9079f6000000
x-ms-version: 2009-09-19
content-length: 19595
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_ppassword_78acf2374e910b5f7d7f.js.download | 85.10.159.56 | 200 OK | 17 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_ppassword_78acf2374e910b5f7d7f.js.download IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeASCII text, with very long lines (16009) Hash1c2d7bc8dfdc2336f4c7ed75d635eb84 5ff0866f60e38b0596ee7e3b0ce76e9b4c1fe9d0 b17101306100f331477da7a38d9a49fac378ea924c2886cb9d9385296034ba08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/convergedlogin_ppassword_78acf2374e910b5f7d7f.js.download HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: application/javascript
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"4256-5b9aa0f565308"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css | 85.10.159.56 | 200 OK | 108 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeASCII text, with very long lines (61177) Size108 kB (107668 bytes) Hash440ca18024de46b4d73e7540a4fdde46 c4ff7af4e1558e081df52c1e61a5d63d0be577c7 ea6449d448a48495c557755af39701567925ceafc30e06fba05f65e723c91aa3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/converged.v2.login.min_rayhgcterrtxpnvapp3erg2.css HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:20 GMT
content-type: text/css
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"1a494-5b9aa0f55ddd8"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/ | 85.10.159.56 | 200 OK | 359 kB |
URL User Request GET HTTP/2security.royalbrlnkman.com/ IP85.10.159.56:443
CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
Size359 kB (359038 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET / HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_presetpasswordsplitter_eeea541551c1af98b8d0.js.download | 85.10.159.56 | 200 OK | 4.3 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_presetpasswordsplitter_eeea541551c1af98b8d0.js.download IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeASCII text, with very long lines (4525), with no line terminators Hash6c03037fa53dd07b567ccae6caccb95f 37182115182a1d619c1c184a7fd18cec8ae1916d cb6eb0c0d756ed1e370919695cc4d347278528e827fd30fb9cbdf874818376a0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/convergedlogin_presetpasswordsplitter_eeea541551c1af98b8d0.js.download HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: application/javascript
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"10fa-5b9aa0f562bf8"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg | 85.10.159.56 | 200 OK | 513 B |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (529), with no line terminators Hashadc405f5fd089662209870ca5d2106f7 3a8b776df84bf251afc6ddd802cc5bbeddfb0e36 e7bacc97751689afaae192e103fe9851664365c57c7d783560860ad456db7e49
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: image/svg+xml
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"201-5b9aa0f536cd7"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_pcredentialpicker_91d6c0570b2c5d45dd8d.js.download | 85.10.159.56 | 200 OK | 28 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_pcredentialpicker_91d6c0570b2c5d45dd8d.js.download IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeASCII text, with very long lines (26815) Hash8576629b8bbf024a4d9c02fc567252c2 12d851906bb6d909d38557a8a4f0c13e165bcfea 8bdff723aeebbeba31ea9ea76cb1e646fb0ce31bd66b78189db9b1c9142e7296
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/convergedlogin_pcredentialpicker_91d6c0570b2c5d45dd8d.js.download HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: application/javascript
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"6c8c-5b9aa0f56a129"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_pfetchsessionsprogress_867283b09411371549f8.js.download | 85.10.159.56 | 200 OK | 15 kB |
URL GET HTTP/2security.royalbrlnkman.com/Aanmelden%20bij%20uw%20account_files/convergedlogin_pfetchsessionsprogress_867283b09411371549f8.js.download IP85.10.159.56:443
Requested byhttps://security.royalbrlnkman.com/ CertificateIssuerLet's Encrypt Subjectsecurity.royalbrlnkman.com Fingerprint3D:4E:AE:B7:42:70:71:3F:BB:26:3F:E5:43:00:CE:E3:A5:A6:25:DC ValidityWed, 22 Nov 2023 20:43:07 GMT - Tue, 20 Feb 2024 20:43:06 GMT
File typeASCII text, with very long lines (14265) Hash6946ceeb085e33d8cb719e0e12f43194 e955fb682f76050b7e15ac06be7081edf4ad8010 6c7ae732d92021dc9fb1ff3921a2ebfbe1b91fc6d24a967a232e30847b23ebbd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook |
GET /Aanmelden%20bij%20uw%20account_files/convergedlogin_pfetchsessionsprogress_867283b09411371549f8.js.download HTTP/1.1
Host: security.royalbrlnkman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://security.royalbrlnkman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 01:47:19 GMT
content-type: application/javascript
last-modified: Sun, 24 Jan 2021 19:02:16 GMT
etag: W/"3b86-5b9aa0f56c839"
content-encoding: br
X-Firefox-Spdy: h2
|
|