Report Overview

  1. Submitted URL

    gxjjcn.com/hyi/-/dir/c569313a75ee897262d39ac977e712c7/execution.html?REDACTED

  2. IP

    203.195.137.159

    ASN

    #45090 Shenzhen Tencent Computer Systems Company Limited

  3. Submitted

    2022-09-30 10:13:07

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    7

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    34

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.globalsign.com20750001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
code.jquery.com6340001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ipinfo.io81360001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.jsdelivr.net4390001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
gxjjcn.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ajax.googleapis.com129050001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumgxjjcn.com/hyi/-/dir/dist/js.cookie.jsPhishing
mediumgxjjcn.com/hyi/-/dir/dist/jquery-lang.jsPhishing
mediumgxjjcn.com/hyi/-/dir/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woffPhishing
mediumgxjjcn.com/hyi/-/dir/dist/DHL_footer.htmlPhishing
mediumgxjjcn.com/hyi/-/dir/dist/load.phpPhishing
mediumgxjjcn.com/hyi/-/dir/dist/DHL_head.htmlPhishing
mediumgxjjcn.com/hyi/-/dir/dist/langpack/en.jsonPhishing
mediumgxjjcn.com/hyi/-/dir/dist/langpack/en.jsonPhishing
mediumgxjjcn.com/hyi/-/dir/dist/langpack/en.jsonPhishing
mediumgxjjcn.com/hyi/-/dir/dist/langpack/en.jsonPhishing
mediumgxjjcn.com/hyi/-/dir/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woffPhishing
mediumgxjjcn.com/hyi/-/dir/dist/langpack/en.jsonPhishing
mediumgxjjcn.com/hyi/-/dir/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woffPhishing
mediumgxjjcn.com/hyi/-/dir/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woffPhishing
mediumgxjjcn.com/hyi/-/dir/dist/DHL_track.htmlPhishing
mediumgxjjcn.com/hyi/-/dir/dist/jquery.validate.min.jsPhishing
mediumgxjjcn.com/hyi/-/dir/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woffPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (14)

HTTP Transactions (44)

URLIPResponseSize
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.25200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
gxjjcn.com/hyi/-/dir/c569313a75ee897262d39ac977e712c7/execution.html?REDACTED
203.195.137.159200 OK1.9 kB
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
142.250.74.42200 OK33 kB
code.jquery.com/jquery-3.5.1.min.js
69.16.175.42200 OK31 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK329 B
gxjjcn.com/hyi/-/dir/dist/js.cookie.js
203.195.137.159200 OK1.5 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
gxjjcn.com/hyi/-/dir/dist/jquery-lang.js
203.195.137.159200 OK8.0 kB
push.services.mozilla.com/
100.20.30.105101 Switching Protocols0 B
gxjjcn.com/hyi/-/dir/dist/dhl.css
203.195.137.159200 OK364 kB
gxjjcn.com/hyi/-/dir/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff
203.195.137.159200 OK41 kB
gxjjcn.com/hyi/-/dir/dist/DHL_footer.html
203.195.137.159200 OK6.3 kB
gxjjcn.com/hyi/-/dir/dist/load.php
203.195.137.159200 OK1.2 kB
gxjjcn.com/hyi/-/dir/dist/DHL_head.html
203.195.137.159200 OK3.4 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98c23448-09e3-4c05-86c5-dafbe6ca8a0e.jpeg
34.120.237.76200 OK8.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg
34.120.237.76200 OK5.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59da9c68-5ffa-4dc1-adf8-645278cd60ca.jpeg
34.120.237.76200 OK10 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a61a47-b3b8-4176-b9f5-9676cd6af7fc.jpeg
34.120.237.76200 OK9.4 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp
34.120.237.76200 OK6.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0881edd-e0e9-466c-b336-8ab1cddabd13.jpeg
34.120.237.76200 OK6.3 kB
ipinfo.io/country
34.117.59.81302 Found72 B
ocsp.pki.goog/s/gts1d4/5QlTZKzjgCw
142.250.74.3200 OK472 B
gxjjcn.com/hyi/-/dir/dist/favicon.ico
203.195.137.159200 OK1.2 kB
gxjjcn.com/hyi/-/dir/dist/langpack/en.json
203.195.137.159200 OK514 B
gxjjcn.com/hyi/-/dir/dist/langpack/en.json
203.195.137.159200 OK514 B
gxjjcn.com/hyi/-/dir/dist/langpack/en.json
203.195.137.159200 OK514 B
gxjjcn.com/hyi/-/dir/dist/langpack/en.json
203.195.137.159200 OK514 B
gxjjcn.com/hyi/-/dir/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff
203.195.137.159200 OK9.3 kB
gxjjcn.com/hyi/-/dir/dist/langpack/en.json
203.195.137.159200 OK514 B
gxjjcn.com/hyi/-/dir/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff
203.195.137.159200 OK41 kB
gxjjcn.com/hyi/-/dir/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff
203.195.137.159200 OK44 kB
gxjjcn.com/hyi/-/dir/dist/DHL_track.html
203.195.137.159200 OK2.6 kB
gxjjcn.com/hyi/-/dir/dist/jquery.validate.min.js
203.195.137.159200 OK8.8 kB
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
151.101.85.229301 Moved Permanently0 B
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK1.5 kB
gxjjcn.com/hyi/-/dir/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff
203.195.137.159200 OK41 kB