Report Overview

  1. Submitted URL

    dutsh-helppackage.ecranul.ro/public/xUQGubgvrzf2ulGTod2XpPRSJKTq5Ql3

  2. IP

    85.9.63.169

    ASN

    #5606 GTS Telecom SRL

  3. Submitted

    2023-02-05 01:16:15

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - DHL

Detections

  1. urlquery

    2

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    12

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
script.hotjar.com8872020-11-05T17:23:46Z2023-03-13T07:54:54Z
vars.hotjar.com10142020-11-05T11:13:14Z2023-03-12T19:56:22Z
ocsp.usertrust.com8992012-05-21T17:43:18Z2023-03-13T08:38:38Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
cdn.jsdelivr.net4392012-09-30T02:15:09Z2023-03-13T06:17:54Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
r.lr-in.com168282021-07-27T15:26:50Z2023-03-13T05:28:10Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-13T05:09:19Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
cdnjs.cloudflare.com2352015-04-17T22:46:33Z2023-03-13T05:09:21Z
ws-mt1.pusher.com82532018-09-20T13:30:02Z2023-03-13T07:20:47Z
kit.fontawesome.com18682019-12-16T20:51:31Z2023-03-13T05:10:17Z
static.hotjar.com6412014-11-01T06:14:27Z2023-03-13T05:12:51Z
dutsh-helppackage.ecranul.rounknown2023-01-16T12:09:12Z2023-03-09T05:02:46Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumdutsh-helppackage.ecranul.ro/public/xUQGubgvrzf2ulGTod2XpPRSJKTq5Ql3DHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/publicDHL Airways, Inc.
mediumdutsh-helppackage.ecranul.ro/DHL Airways, Inc.

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdutsh-helppackage.ecranul.ro/public/xUQGubgvrzf2ulGTod2XpPRSJKTq5Ql3Phishing
mediumdutsh-helppackage.ecranul.ro/publicPhishing
mediumdutsh-helppackage.ecranul.ro/public/Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (27)

URLIPResponseSize
dutsh-helppackage.ecranul.ro/public/xUQGubgvrzf2ulGTod2XpPRSJKTq5Ql3
85.9.63.169302 Found175 B
dutsh-helppackage.ecranul.ro/public
85.9.63.169301 Moved Permanently707 B
dutsh-helppackage.ecranul.ro/public/
85.9.63.169200 OK315 B
cdn.jsdelivr.net/gh/killbot-org/Killbot-JS@latest/dist/main.min.js
151.101.193.229200 OK1.2 kB
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
151.101.66.133200 OK1.5 kB
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.24.14200 OK5.6 kB
ocsp.digicert.com/
93.184.220.29200 OK278 B
push.services.mozilla.com/
35.164.121.101101 Switching Protocols0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a38348b-ed70-4e2f-80ce-d13e44fefcfc.webp
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
34.120.237.76200 OK5.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef803fc0-c789-4c2b-8cb2-33bef88abc9c.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9070541c-6707-464e-b141-b6c767d8a58a.jpeg
34.120.237.76200 OK12 kB
ocsp.usertrust.com/
172.64.155.188200 OK472 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg
34.120.237.76200 OK7.7 kB
script.hotjar.com/modules.bca0d1c28285412bb689.js
143.204.55.40200 OK68 kB
vars.hotjar.com/box-e031119f9e9e307a08fa610f85dbfb52.html
143.204.55.101200 OK1.0 kB
ws-mt1.pusher.com/app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false
34.199.231.110101 Switching Protocols0 B
r.lr-in.com/i?a=mnnzup%2Fdus&r=5-380db488-48f9-4b42-a423-bbe1394a67da&t=c5cc3ffb-9963-48de-b30a-d28213fe9e97&s=0&rs=0%2Cu&u=2caceab3-7c0c-4d91-8221-cb4b37f28496&is=1
104.198.23.205201 Created104 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626efb39-4b90-4979-bc7d-1a1ba9e7fc73.jpeg
34.120.237.76200 OK9.3 kB
kit.fontawesome.com/f7165dd215.js
104.18.22.52200 OK0 B
static.hotjar.com/c/hotjar-2895475.js?sv=6
143.204.55.98200 OK0 B