| viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 |  91.216.107.79 | 403 Forbidden | 417 B |
URL User Request GET viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 IP91.216.107.79:443 ASN#210403 Groupe LWS SARL
CertificateIssuerLet's Encrypt Subject*.webdb24.lwspanel.com Fingerprint34:7B:E3:04:59:FD:82:56:E7:91:DF:62:40:35:66:B3:7C:4E:8C:10 ValidityTue, 11 Mar 2025 00:40:12 GMT - Mon, 09 Jun 2025 00:40:11 GMT
File typeHTML document, ASCII text, with very long lines (430), with no line terminators Hash523c25ebc5f2d27b5a7cc35483a436d4 6cb74b4a1b955d70db3ff52a7311f43d3ae5c1e5 f610171a5008f3e2f7c70bb8408be73bc59644f92682aa597b469cc2c63d5e2d
| NIDS | Severity | Alert |
|---|
| suricata | high | ETPRO PHISHING Antibomber Phish Kit |
GET /dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 HTTP/1.1
Host: viafr1217750.webdb24.lwspanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sat, 22 Mar 2025 13:53:14 GMT
content-type: text/html; charset=iso-8859-1
content-encoding: gzip
X-Firefox-Spdy: h2
|
| viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 | 91.216.107.79 | 403 Forbidden | 417 B |
URL User Request GET viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 IP91.216.107.79:80 ASN#210403 Groupe LWS SARL
File typeHTML document, ASCII text, with very long lines (430), with no line terminators Hash523c25ebc5f2d27b5a7cc35483a436d4 6cb74b4a1b955d70db3ff52a7311f43d3ae5c1e5 f610171a5008f3e2f7c70bb8408be73bc59644f92682aa597b469cc2c63d5e2d
| NIDS | Severity | Alert |
|---|
| suricata | high | ETPRO PHISHING Antibomber Phish Kit |
GET /dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063 HTTP/1.1
Host: viafr1217750.webdb24.lwspanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 22 Mar 2025 13:53:14 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
| viafr1217750.webdb24.lwspanel.com/favicon.ico | 91.216.107.79 | 403 Forbidden | 417 B |
URL GET viafr1217750.webdb24.lwspanel.com/favicon.ico IP91.216.107.79:80 ASN#210403 Groupe LWS SARL
Requested byhttp://viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063
File typeHTML document, ASCII text, with very long lines (430), with no line terminators Hash523c25ebc5f2d27b5a7cc35483a436d4 6cb74b4a1b955d70db3ff52a7311f43d3ae5c1e5 f610171a5008f3e2f7c70bb8408be73bc59644f92682aa597b469cc2c63d5e2d
GET /favicon.ico HTTP/1.1
Host: viafr1217750.webdb24.lwspanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://viafr1217750.webdb24.lwspanel.com/dhl/Pakage/bun/F004f19441/00951124a.php?web=succes&local=_&id=96113063
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 22 Mar 2025 13:53:14 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|