Report - maxdata.ro/plalaa/4UBHxsuihQ6EBt52y3Z49WkMvDhccrWAQk9HpD0XKbfOZxxQ6A/d2VibWFzdGVyQHdlc3RzeXN0ZW0uY29t

Report Overview

Submitted URL
maxdata.ro/plalaa/4UBHxsuihQ6EBt52y3Z49WkMvDhccrWAQk9HpD0XKbfOZxxQ6A/d2VibWFzdGVyQHdlc3RzeXN0ZW0uY29t
IP
195.20.203.141
ASN
#48161 Nextgen Communications Srl
Submitted
2024-05-03 13:06:31
Access
public
Website Title
Webmail Login
Final URL
clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com
Tags
phishing
urlquery detections
Phishing - Generic phishing

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
maxdata.ro	unknown	unknown	No data	No data	555 B	321 B	195.20.203.141
clinicadrchioasca.ro	unknown	2019-09-17	2020-02-26	2022-07-28	7.7 kB	40 kB	89.42.218.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com	20 kB	2024-05-02	2024-05-07
Pretty URL clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com IP 89.42.218.138 ASN #205275 ROMARG SRL Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-02 14:51:40 Last Seen2024-05-07 07:53:35 Times Seen9 Hash cc32f61a00dbbe0d1d3787d3f0770940 43f791a6d5a478e8b85e6518c89e59c14232280f fd60066ff0d362a393faf3619f45c317770dd31682735044ce82297ae17edca8 Loading...

	unknown	532 B	2024-05-02	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 14:51:40 Last Seen2024-05-07 07:53:35 Times Seen9 Hash 0fcfd9ff49f9a4ef88b632af9ae42fbf 6fe300c7a31917b84756601deb88b306da2cbc29 fb88ab3a6111f4307a56dc9de34fa089827f52c51c2747f4ae6194e6c4dc641b Loading...

		Size	First Seen	Last Seen
	#1 Write - 0cd3ca9bd3a65897c2f127129c297b80	6.9 kB	2024-05-02	2024-05-07
Pretty Observations First Seen2024-05-02 14:51:40 Last Seen2024-05-07 07:53:35 Times Seen9 Hash 0cd3ca9bd3a65897c2f127129c297b80 9d88d9cebbf47ce913456287dad83cac86466b06 068963fe3c7f386072ce868a6794c54d4e1872bca5524a5b78060897f8da61e2 Loading...

HTTP Transactions (14)

	URL	IP	Response	Size
	maxdata.ro/plalaa/4UBHxsuihQ6EBt52y3Z49WkMvDhccrWAQk9HpD0XKbfOZxxQ6A/d2VibWFzdGVyQHdlc3RzeXN0ZW0uY29t	195.20.203.141		0 B
URL maxdata.ro/plalaa/4UBHxsuihQ6EBt52y3Z49WkMvDhccrWAQk9HpD0XKbfOZxxQ6A/d2VibWFzdGVyQHdlc3RzeXN0ZW0uY29t IP 195.20.203.141:0 ASN #48161 Nextgen Communications Srl File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /plalaa/4UBHxsuihQ6EBt52y3Z49WkMvDhccrWAQk9HpD0XKbfOZxxQ6A/d2VibWFzdGVyQHdlc3RzeXN0ZW0uY29t HTTP/1.1 Host: maxdata.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 03 May 2024 13:06:06 GMT Server: Apache refresh: 0;url=https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8`

	clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com	89.42.218.138	200 OK	2.6 kB
URL User Request GET HTTP/2 clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com IP 89.42.218.138:443 ASN #205275 ROMARG SRL Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type HTML document, ASCII text, with very long lines (20421), with CRLF line terminators Size 2.6 kB (2562 bytes) Hash 54150b0680f7f5774ddfcfd82392f3b9 1761f342aae8b55cecc4009110c722d5e06eef4e 133c97e247e66daa5ae2b4d2b29d9ba6d67e0607ed86022d353e1d5e3dd6a721 HTTP Headers GET /6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: text/html last-modified: Mon, 22 Apr 2024 07:43:58 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 2562 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css	89.42.218.138	200 OK	469 B
URL GET HTTP/3 clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type ASCII text, with very long lines (6358), with no line terminators Size 469 B (469 bytes) Hash 952b5c93a75a89c458fe5093480dd1bc 564d17e569cb59cf7043d7f777727c19a3cbda3a 17781767b9edf1ebdde3529494d5cb3d8403702893db10258bedd3f9b8002f20 HTTP Headers GET /6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK cache-control: public, max-age=604800 expires: Fri, 10 May 2024 13:06:06 GMT content-type: text/css last-modified: Sun, 21 Apr 2024 03:03:52 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 469 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

	clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/style_v2_optimized.css	89.42.218.138	200 OK	29 kB
URL GET HTTP/3 clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/style_v2_optimized.css IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type ASCII text, with very long lines (35968) Size 29 kB (29300 bytes) Hash 36e0d84bb87bd2f94e5c565e968824f6 200cf0a2f0351afbfa29294dc44ed0fb861d0213 9dd68b9903da4665cfaf06fe91d806c08bb1ad10e1ace378a19b029cfedcee2d HTTP Headers GET /6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/style_v2_optimized.css HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Fri, 10 May 2024 13:06:06 GMT content-type: text/css last-modified: Sun, 21 Apr 2024 03:03:52 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 29300 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/webmail-logo.svg	89.42.218.138	200 OK	2.3 kB
URL GET HTTP/3 clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/webmail-logo.svg IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type SVG Scalable Vector Graphics image Size 2.3 kB (2268 bytes) Hash bc0c956653325b9e694d4dd1dfb78020 e1196e4db68ed573355ade966152a084581b40ec 998cd48cdc0414f694d0a3a299dd2beb1134769d5666c7e5567e7d20b4174ef8 HTTP Headers GET /6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/webmail-logo.svg HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK cache-control: public, max-age=604800 expires: Fri, 10 May 2024 13:06:06 GMT content-type: image/svg+xml last-modified: Sun, 21 Apr 2024 03:03:52 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 2268 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/favicon.ico	89.42.218.138	404 Not Found	1.2 kB
URL GET HTTP/3 clinicadrchioasca.ro/favicon.ico IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type HTML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers GET /favicon.ico HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-username.png	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-username.png IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-username.png HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/style_v2_optimized.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-password.png	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-password.png IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1594922736/unprotected/cpanel/images/icon-password.png HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/style_v2_optimized.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

	clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf	89.42.218.138	200 OK	0 B
URL GET HTTP/3 clinicadrchioasca.ro/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf IP 89.42.218.138:443 ASN #205275 ROMARG SRL Requested by https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/login.html?email=webmaster@westsystem.com Certificate IssuerLet's Encrypt Subject.clinicadrchioasca.ro FingerprintC2:D7:61:D5:A9:20:A2:0C:10:83:18:28:88:86:A3:55:69:7D:72:A6 ValidityFri, 29 Mar 2024 14:39:06 GMT - Thu, 27 Jun 2024 14:39:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf HTTP/1.1 Host: clinicadrchioasca.ro User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://clinicadrchioasca.ro/6181482683:AAEDFI_zwspjlLl7Mn4B2ETWfI4Z/KNYGHT/open_sans.min.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-length: 0 date: Fri, 03 May 2024 13:06:06 GMT server: LiteSpeed x-xss-protection: 1; mode=block x-content-type-options: nosniff`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size