Report - boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php

Report Overview

Submitted URL
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php
IP
193.203.204.226
ASN
#39758 SimpliQ Tech SRL
Submitted
2024-07-27 01:32:12
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
62

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
boomerangsolution.deltatrack.ro	unknown	2008-07-15	2019-08-22	2022-12-05	9.9 kB	90 kB	193.203.204.226
r10.o.lencr.org	unknown	2020-06-29	2024-06-06	2024-07-26	2.3 kB	6.2 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-19	medium	boomerangsolution.deltatrack.ro/tracking.php	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.
2024-07-20	medium	boomerangsolution.deltatrack.ro/	DHL Airways, Inc.

PhishTank

Scan Date	Severity	Indicator	Alert
2024-06-01	medium	boomerangsolution.deltatrack.ro/tracking.php	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed
2024-07-26	medium	deltatrack.ro	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (22)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
577f20b1ad1240dc12215f4d93e53b8f
4fb6d79b9c4adb8f712073e9662ceae41a4f097c
523bc00bcd3cc12a640ebce3df80c0aed9fc552c4be5bae1831c00b9027ce0c0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "523BC00BCD3CC12A640EBCE3DF80C0AED9FC552C4BE5BAE1831C00B9027CE0C0"
Last-Modified: Wed, 24 Jul 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Sat, 27 Jul 2024 04:05:22 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
559312780d7c69aabb31f612abe74b95
0d0356dc28789b5b2b0164783f2c79b6b7b82f6a
20293009653baaf415bde5c2223feb0a6562281a1dfbcc6af42d844341da6d26

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "20293009653BAAF415BDE5C2223FEB0A6562281A1DFBCC6AF42D844341DA6D26"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18964
Expires: Sat, 27 Jul 2024 06:47:48 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
8f4e7b75de1ed909fa79bbcdafccceac
274c1ea75520a0ea06e19a7e692c034baae2cdc1
62cc974e51b62480f576b53853f8f24bfc873687c02bc23c1713956d4b96c0b1

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62CC974E51B62480F576B53853F8F24BFC873687C02BC23C1713956D4B96C0B1"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9544
Expires: Sat, 27 Jul 2024 04:10:48 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
0b6f864b0a3d0cf483b0830bdb98cded
12564f2826ce74a640c3b65ef52d12f21c8e6f3c
d32892cb09f33f4057712b1c1b511af5ea5528cd0f23ba90858d659ec4fcd190

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D32892CB09F33F4057712B1C1B511AF5EA5528CD0F23BA90858D659EC4FCD190"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5041
Expires: Sat, 27 Jul 2024 02:55:45 GMT
Date: Sat, 27 Jul 2024 01:31:44 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
91392416ed946eb8b26810ff46d7e57e
8ce21a441df1ac09da4ebf098eaf47e2d74bbff0
5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9750
Expires: Sat, 27 Jul 2024 04:14:16 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
91392416ed946eb8b26810ff46d7e57e
8ce21a441df1ac09da4ebf098eaf47e2d74bbff0
5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9750
Expires: Sat, 27 Jul 2024 04:14:16 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
91392416ed946eb8b26810ff46d7e57e
8ce21a441df1ac09da4ebf098eaf47e2d74bbff0
5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9659
Expires: Sat, 27 Jul 2024 04:12:45 GMT
Date: Sat, 27 Jul 2024 01:31:46 GMT
Connection: keep-alive

boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php

193.203.204.226

302 Found

11 kB

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
11 kB (10925 bytes)
Hash
5067c3e7f7783f558f01bc06c4ae24b5
95c4631fd5bc7eb3817a41e8993e226a37b6d77b
4176796ec8ed928df57486cb3773c74b5071496c5256fcd7fee92ad2f9ea43cb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:40 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

40 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
40 B (40 bytes)
Hash
e62ff0123a74adfc6903d59a449cbdb0
e3f4c61a216c2c9613cd3bdd1420dde095b296b3
e7ab72b8f37c7c9c9f6386fb8e3dfa40bf6fe4b67876703c5927e47cb8664ce4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:42 GMT
server: Apache
X-Firefox-Spdy: h2

boomerangsolution.deltatrack.ro/tracking.php

193.203.204.226

46 kB

URL
boomerangsolution.deltatrack.ro/tracking.php
IP
193.203.204.226:0
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
HTML document, ASCII text, with very long lines (33241), with CRLF line terminators
Size
46 kB (46083 bytes)
Hash
1e068cdee1bd023974e580f39e0322fd
dba5c5086f6137f0519552b21b4e8fba27161410
72dd515c65724011f611339d346e2c570aa9e63d04de7e110e7b33f8fb4625d6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 27 Jul 2024 01:31:43 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

193.203.204.226

302 Found

20 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:44 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: tracking.php
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

193.203.204.226

302 Found

20 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:48 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Location: tracking.php
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

193.203.204.226

302 Found

9.4 kB

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
9.4 kB (9424 bytes)
Hash
9a1c9eab3feb1255998e88bc0d764f2e
db7f012123d9da9289f344a0f56d50c1b9fa6e93
6d20f5fc5cbf18c55f9dad8c305bcb7941af75da2f7880c12e20d9839b0b1f52

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:44 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

5.5 kB

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
5.5 kB (5504 bytes)
Hash
30f05a220e3bdc58c1c2127a45f12e94
5db2dcc8c83c8f82b4b63568ef2237a8bd278b42
ba2917216a48c8d56645f1b18b76d766dbe63910f3837f580638ab535350c841

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:42 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

9.0 kB

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
9.0 kB (9017 bytes)
Hash
198d9e0bd8ca45deed1f0ce3b213a64f
92d796512d78ec25ae41085de86c044bd7438685
d12ef068cc457b851dc0c199e5eed28f83a6206c337a788a305bc6917c3b22bc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:49 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

180 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
180 B (180 bytes)
Hash
3f17c60f07fb4e98fa7f64578b3ec1e1
3e9517b892d7164b81ce28b01daac37204c06c8e
4825bc92bde9ee7c98a29111f779b451e6857182611c5e2c0fb1a8cbbf186754

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:45 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

3.8 kB

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
3.8 kB (3820 bytes)
Hash
c0854a0c7db3a057354feb53c13bffcf
516451b048632e576776ac7b5125089b874740ca
50cf8c7669aaef6784ca3ee5d41e04a7fe73e98c78da8d9d19c3c4661fb3129c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:43 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

80 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
80 B (80 bytes)
Hash
ebba6f95050d9c8bc108afd55a8e64bf
77fa7c6da4262f45e550796281bc3a306f1bbab5
8d779a504a4175abf17a101756c7e72e9a77466d89656aded7ca632a0bc537ce

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:51 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

340 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
340 B (340 bytes)
Hash
078d281eaf9ea1cfcd06bc4ae5e6bbc4
686d40775ab09c1125cfca8ad21ccee5b42972ce
20aa07ac13755ce09b08f4f17a528fd51b94eef874c3fefa5aec1af3c5732a5f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:55 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

220 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
220 B (220 bytes)
Hash
b9b00e301c361e0fd0b2568ff09c6e12
52a478c1996dbb8b75e49c3eb3f7edb72fb8f312
f8a3faa4b19b587e17f002a5c5dea8ba2eeb998a564b5b4ef56b761d90a58fbe

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:46 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

220 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
220 B (220 bytes)
Hash
b9b00e301c361e0fd0b2568ff09c6e12
52a478c1996dbb8b75e49c3eb3f7edb72fb8f312
f8a3faa4b19b587e17f002a5c5dea8ba2eeb998a564b5b4ef56b761d90a58fbe

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:53 GMT
server: Apache
X-Firefox-Spdy: h2

193.203.204.226

302 Found

660 B

URL User Request GET HTTP/2
boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php
IP
193.203.204.226:443
ASN
#39758 SimpliQ Tech SRL

Certificate
IssuerLet's Encrypt
Subjectwww.boomerangsolution.deltatrack.ro
Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C
ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT

File type
gzip compressed data, from Unix
Size
660 B (660 bytes)
Hash
2f34fe522aaa172bdb4a3807f0acdf8f
726c04266a9fad23ebc11ed105edaa6df6bb5249
a604d95cf476c7292f36f0c077c405dde5fdb0671a4d6799d1c47ab8aa8b4abe

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.php/tracking.phptracking.phptracking.phptracking.php/tracking.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:49 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (22)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate