| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash577f20b1ad1240dc12215f4d93e53b8f 4fb6d79b9c4adb8f712073e9662ceae41a4f097c 523bc00bcd3cc12a640ebce3df80c0aed9fc552c4be5bae1831c00b9027ce0c0
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "523BC00BCD3CC12A640EBCE3DF80C0AED9FC552C4BE5BAE1831C00B9027CE0C0"
Last-Modified: Wed, 24 Jul 2024 18:56:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9215
Expires: Sat, 27 Jul 2024 04:05:22 GMT
Date: Sat, 27 Jul 2024 01:31:47 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash559312780d7c69aabb31f612abe74b95 0d0356dc28789b5b2b0164783f2c79b6b7b82f6a 20293009653baaf415bde5c2223feb0a6562281a1dfbcc6af42d844341da6d26
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "20293009653BAAF415BDE5C2223FEB0A6562281A1DFBCC6AF42D844341DA6D26"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18961
Expires: Sat, 27 Jul 2024 06:47:48 GMT
Date: Sat, 27 Jul 2024 01:31:47 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash8f4e7b75de1ed909fa79bbcdafccceac 274c1ea75520a0ea06e19a7e692c034baae2cdc1 62cc974e51b62480f576b53853f8f24bfc873687c02bc23c1713956d4b96c0b1
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62CC974E51B62480F576B53853F8F24BFC873687C02BC23C1713956D4B96C0B1"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9541
Expires: Sat, 27 Jul 2024 04:10:48 GMT
Date: Sat, 27 Jul 2024 01:31:47 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash0b6f864b0a3d0cf483b0830bdb98cded 12564f2826ce74a640c3b65ef52d12f21c8e6f3c d32892cb09f33f4057712b1c1b511af5ea5528cd0f23ba90858d659ec4fcd190
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D32892CB09F33F4057712B1C1B511AF5EA5528CD0F23BA90858D659EC4FCD190"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5038
Expires: Sat, 27 Jul 2024 02:55:45 GMT
Date: Sat, 27 Jul 2024 01:31:47 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash91392416ed946eb8b26810ff46d7e57e 8ce21a441df1ac09da4ebf098eaf47e2d74bbff0 5d153b40d51555b8f2717f7e56bfbe3be25b1b38a18b31715eea4ddff345f98a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D153B40D51555B8F2717F7E56BFBE3BE25B1B38A18B31715EEA4DDFF345F98A"
Last-Modified: Wed, 24 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9747
Expires: Sat, 27 Jul 2024 04:14:16 GMT
Date: Sat, 27 Jul 2024 01:31:49 GMT
Connection: keep-alive
|
|
| boomerangsolution.deltatrack.ro/ | 193.203.204.226 | | 20 B |
URL boomerangsolution.deltatrack.ro/ IP 193.203.204.226:0
ASN#39758 SimpliQ Tech SRL
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:46 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: tracking.php
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 46 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typeHTML document, ASCII text, with very long lines (33241), with CRLF line terminators Hash1e068cdee1bd023974e580f39e0322fd dba5c5086f6137f0519552b21b4e8fba27161410 72dd515c65724011f611339d346e2c570aa9e63d04de7e110e7b33f8fb4625d6
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:45 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 20 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:47 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: tracking.php
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 180 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash3f17c60f07fb4e98fa7f64578b3ec1e1 3e9517b892d7164b81ce28b01daac37204c06c8e 4825bc92bde9ee7c98a29111f779b451e6857182611c5e2c0fb1a8cbbf186754
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:49 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 12 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash728c93c475b3466190ac58908f250da9 b36b38963928cac7c083e0c2a2287271d26197ec 32236fffb61c277159da949839a0325011e021e73e89ad751d7830da321d0aca
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:44 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 3.4 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashdc6ab4d6eee8b2c39d9e05fb40b777cb de07229f8a7b52777840a3cc3814183e8770c36a b364f8c7fcb5556c271188eb70409ea7382944e98bf6fb6421d1989e9b0c40e2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 40 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashe62ff0123a74adfc6903d59a449cbdb0 e3f4c61a216c2c9613cd3bdd1420dde095b296b3 e7ab72b8f37c7c9c9f6386fb8e3dfa40bf6fe4b67876703c5927e47cb8664ce4
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 5.1 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash9afa4dd8be2e2b4132541dd305c616a7 27b6609fb3fc0c8a536dfde64799c864a6ebe44f b50c7bbedd6e7f3b0c79bace40862d9f0df0b48a58768fb260d3307df7aaebf1
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 220 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashb9b00e301c361e0fd0b2568ff09c6e12 52a478c1996dbb8b75e49c3eb3f7edb72fb8f312 f8a3faa4b19b587e17f002a5c5dea8ba2eeb998a564b5b4ef56b761d90a58fbe
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:44 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 6.9 kB |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash4e79aa55d2bab321cde2b38f3f654e09 eb9bfbf20a15ce2242bba92c4d0954d0ba5911f4 2774ab90934930126d6dc150489b355b01e4df9dd445718377e51c5f355837f4
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 20 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Sat, 27 Jul 2024 01:31:59 GMT
Server: Apache
Content-Encoding: gzip
Vary: Accept-Encoding
Location: tracking.php
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 420 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hashaade78f3a7b93bea586791d2b38fd71b 32d36031c8a18211f4b62945746d3c522ca3fe90 e9cf3a0c714a45a46e75d299e37a4aabeb04c862e65d92c73a7998a91eaa7e9c
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:57 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 540 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash259084094bb933581a30ecdc194c2769 e0340474c1fd6a2f0bb305f1a53106c9dcab95a2 bb5d1259db1470019d289abf0b9449075ee32fa7343b447d001baffe98652de5
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 320 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash4b01465d8d2fb8d69ce6df7fff46e856 73aa4b24669e7ec134cf2bedd949165cbad96797 7ff15a5bb56be8bf6d9d497b6e753e213e55004bb88a23518c4d8ff12b7b878c
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:32:04 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php | 193.203.204.226 | 302 Found | 400 B |
URL User Request GET HTTP/2boomerangsolution.deltatrack.ro/ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php IP 193.203.204.226:443
ASN#39758 SimpliQ Tech SRL
CertificateIssuerLet's Encrypt Subjectwww.boomerangsolution.deltatrack.ro Fingerprint47:27:B7:7E:15:0B:D9:26:EE:99:49:73:28:52:C7:4D:E2:14:67:2C ValidityMon, 24 Jun 2024 21:09:05 GMT - Sun, 22 Sep 2024 21:09:04 GMT
File typegzip compressed data, from Unix Hash91fdc9b76eb92a77b6653c963b2ea4af c4eafb17d2ac891d44d75fdd2785bd2a71cd3fdb 4869b1e004f5e0662279555f039f4a75859180aecfca0472e04eaf9070fe1e7a
Analyzer | Verdict | Alert | OpenPhish | phishing | DHL Airways, Inc. | Quad9 DNS | malicious | Sinkholed |
GET /ressources/bundle-utapi.5a06c13ce82a72f9080b7294f2746e49.css/tracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking.phptracking....~444~...g.phptracking.phptracking.php/tracking.php HTTP/1.1
Host: boomerangsolution.deltatrack.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding
location: tracking.php
content-type: text/html; charset=UTF-8
date: Sat, 27 Jul 2024 01:31:58 GMT
server: Apache
X-Firefox-Spdy: h2
|
|