Report Overview
URL
elpneuma.pneumaint.org/xwsys.php/
Finishing URL
emanuelabsoluciones.com/wemle/hwew/login.htm
IP / ASN
67.212.179.164
Title
Webmail Portal Login
Phishing - Generic phishing
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
8
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
elpneuma.pneumaint.org 5 alert(s) on this Host | unknown | 2022-04-26 | 2026-02-26 | 2026-02-26 | 501 B | 11 kB | 67.212.179.164 |   |
emanuelabsoluciones.com 4 alert(s) on this Host | unknown | 2021-11-30 | 2026-02-26 | 2026-02-26 | 512 B | 12 kB | 50.31.176.166 |  |
firebasestorage.googleapis.com | 40974 | 2005-01-25 | 2017-01-30 | 2026-02-19 | 1.1 kB | 1.1 kB | 142.251.142.234 | |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-02-22 | 466 B | 294 kB | 151.101.130.137 |   |
alphatrade-options.com | unknown | 2023-10-23 | 2020-08-05 | 2026-02-24 | 460 B | 0 B |  0.0.0.0 |
PHP:7.4.33 (Programming languages)
PHP is a general-purpose scripting language used for web development.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.jQuery:1.12.4 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.Varnish (Caching)
Varnish is a reverse caching proxy.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | elpneuma.pneumaint.org | malicious | Sinkholed |
| Hagezi Threat Feed | elpneuma.pneumaint.org | malicious | Sinkholed |
| DigiCert UltraDNS | elpneuma.pneumaint.org | malicious | Sinkholed |
| Quad9 DNS | elpneuma.pneumaint.org | malicious | Sinkholed |
| DNS4EU | elpneuma.pneumaint.org | malicious | Sinkholed |
| Hagezi Threat Feed | emanuelabsoluciones.com | malicious | Sinkholed |
| DNS4EU | emanuelabsoluciones.com | malicious | Sinkholed |
| Quad9 DNS | emanuelabsoluciones.com | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (6)
| URL | IP | Response | Size |
|---|