Report Overview

  1. Submitted URL

    www.ndnmag.fr/en/e4bcd9fd5202e1bee76c1beaa282db96/execution.html?validation=e1s1

  2. IP

    46.182.4.120

    ASN

    #204818 Hosteur SAS

  3. Submitted

    2023-02-06 03:35:30

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - DHL

    Suspicious - Suspicious JS code

Detections

  1. urlquery

    34

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    32

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ajax.googleapis.com129052013-08-16T11:51:31Z2023-03-13T08:37:09Z
ipinfo.io81362013-12-16T08:25:53Z2023-03-13T05:42:51Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
cdn.jsdelivr.net4392012-09-30T02:15:09Z2023-03-13T06:17:54Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
code.jquery.com6342012-05-21T19:28:02Z2023-03-13T05:09:57Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-13T05:09:19Z
www.ndnmag.frunknown2022-07-05T18:35:05Z2023-03-05T17:23:18Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 34.117.59.81

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumwww.ndnmag.fr/en/e4bcd9fd5202e1bee76c1beaa282db96/execution.html?validation=e1s1DHL Airways, Inc.

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumwww.ndnmag.fr/en/e4bcd9fd5202e1bee76c1beaa282db96/execution.html?validation=e1s1Phishing
mediumwww.ndnmag.fr/en/dist/js.cookie.jsPhishing
mediumwww.ndnmag.fr/en/dist/jquery-lang.jsPhishing
mediumwww.ndnmag.fr/en/dist/load.phpPhishing
mediumwww.ndnmag.fr/en/dist/DHL_head.htmlPhishing
mediumwww.ndnmag.fr/en/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woffPhishing
mediumwww.ndnmag.fr/en/dist/DHL_footer.htmlPhishing
mediumwww.ndnmag.fr/en/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woffPhishing
mediumwww.ndnmag.fr/en/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woffPhishing
mediumwww.ndnmag.fr/en/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woffPhishing
mediumwww.ndnmag.fr/en/dist/DHL_track.htmlPhishing
mediumwww.ndnmag.fr/en/dist/jquery.validate.min.jsPhishing
mediumwww.ndnmag.fr/en/dist/langpack/en.jsonPhishing
mediumwww.ndnmag.fr/en/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woffPhishing
mediumwww.ndnmag.fr/en/dist/langpack/en.jsonPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (14)

HTTP Transactions (45)

URLIPResponseSize
www.ndnmag.fr/en/e4bcd9fd5202e1bee76c1beaa282db96/execution.html?validation=e1s1
46.182.4.120200 OK1.8 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
142.250.74.106200 OK33 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
code.jquery.com/jquery-3.5.1.min.js
69.16.175.10200 OK31 kB
www.ndnmag.fr/en/dist/js.cookie.js
46.182.4.120200 OK1.4 kB
www.ndnmag.fr/en/dist/jquery-lang.js
46.182.4.120200 OK7.0 kB
www.ndnmag.fr/en/dist/dhl.css
46.182.4.120200 OK315 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
www.ndnmag.fr/en/dist/load.php
46.182.4.120200 OK1.1 kB
www.ndnmag.fr/en/dist/DHL_head.html
46.182.4.120200 OK3.1 kB
www.ndnmag.fr/en/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff
46.182.4.120200 OK41 kB
www.ndnmag.fr/en/dist/DHL_footer.html
46.182.4.120200 OK6.1 kB
www.ndnmag.fr/en/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff
46.182.4.120200 OK9.3 kB
www.ndnmag.fr/en/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff
46.182.4.120200 OK41 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
ipinfo.io/country
34.117.59.81302 Found72 B
www.ndnmag.fr/en/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff
46.182.4.120200 OK44 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
www.ndnmag.fr/en/dist/favicon.ico
46.182.4.120200 OK1.2 kB
ipinfo.io/country
34.117.59.81200 OK3 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
54.149.213.50101 Switching Protocols0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
34.120.237.76200 OK9.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5aedadb2-31f3-4d54-b851-5dd3a166179d.jpeg
34.120.237.76200 OK3.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d63833d-c4af-4746-a163-2d9da6b2bf67.jpeg
34.120.237.76200 OK8.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
34.120.237.76200 OK13 kB
www.ndnmag.fr/en/dist/DHL_track.html
46.182.4.120200 OK2.6 kB
www.ndnmag.fr/en/dist/jquery.validate.min.js
46.182.4.120200 OK7.8 kB
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
151.101.1.229301 Moved Permanently0 B
www.ndnmag.fr/en/dist/langpack/en.json
46.182.4.120200 OK514 B
www.ndnmag.fr/en/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff
46.182.4.120200 OK41 kB
www.ndnmag.fr/en/dist/langpack/en.json
46.182.4.120200 OK514 B
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
151.101.1.229200 OK7.5 kB
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.20.226200 OK1.5 kB