Report - gnerte.djcle.com/confirm.php

Report Overview

Submitted URL
gnerte.djcle.com/confirm.php
IP
172.67.157.236
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 00:03:55
Access
public
Website Title
Confirmation
Final URL
gnerte.djcle.com/confirm.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gnerte.djcle.com	unknown	2023-09-06	2024-04-13	2024-04-14	2.3 kB	121 kB	172.67.157.236

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-14	medium	gnerte.djcle.com/	Facebook, Inc.
2024-04-14	medium	gnerte.djcle.com/	Facebook, Inc.
2024-04-14	medium	gnerte.djcle.com/	Facebook, Inc.
2024-04-14	medium	gnerte.djcle.com/confirm.php	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	gnerte.djcle.com/confirm.php	484 B	2024-01-08	2024-04-18
Pretty URL gnerte.djcle.com/confirm.php IP 172.67.157.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-08 16:08:57 Last Seen2024-04-18 02:03:55 Times Seen15 Hash 1713b419c01d021ff31536f18d31a727 9cfb29f44b37b831c1edd27dd6808298e6b76c07 6e6ee94de34938acfe8e5e597cb298a7d28363a1b8808a143432cb14ff95d0e1 Loading...

	gnerte.djcle.com/confirm.php	31 B	2023-03-08	2024-05-01
Pretty URL gnerte.djcle.com/confirm.php IP 172.67.157.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 12:16:07 Last Seen2024-05-01 05:47:31 Times Seen1638 Hash c8a8aecfed68494dc11a3a2c314544e0 0a032baa9aed1a5c5d570734a958655e008244b0 6dec1d337364ee9defa8079ae6640e5025ee6728e01f98277c6d382947859164 Loading...

	gnerte.djcle.com/confirm.php	235 B	2023-03-07	2024-05-01
Pretty URL gnerte.djcle.com/confirm.php IP 172.67.157.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14:55 Last Seen2024-05-01 05:47:31 Times Seen263 Hash 4f09374e3127a27653a704d5ebf20041 e9de52e35b90de0f3599e7ca32f6c7966219fd9e c9021657278601b27661b8914ef71a7f43d3186b3cfcaee6e442324d059873e2 Loading...

	gnerte.djcle.com/confirm.php	353 B	2023-03-07	2024-05-01
Pretty URL gnerte.djcle.com/confirm.php IP 172.67.157.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:14:55 Last Seen2024-05-01 05:47:31 Times Seen262 Hash 21c96bb16b0c32a397da9759f0aa1154 ea967b4f62d8d791337bb09777cbd7fa6a838f12 73fecd486675b6b2ad1929701ba1303c1e6c6693918fa0f62c354c83b97ea94f Loading...

		Size	First Seen	Last Seen
	#1 Write - 5c30f95b154226778fa3d46ea8552422	14 B	2024-04-18	2024-04-18
Pretty Observations First Seen2024-04-18 02:03:55 Last Seen2024-04-18 14:31:21 Times Seen9 Hash 5c30f95b154226778fa3d46ea8552422 b8f59d0b62590c2701465243fc6dc8c969137aac 23a8f431c92932ea7b0d3ccc279576d87eb8b24ec81443471aff88d05c978a99 Loading...

HTTP Transactions (5)

URL IP Response Size

gnerte.djcle.com/assets/img/fb-text.png

172.67.157.236

200 OK

32 kB

URL GET HTTP/3
gnerte.djcle.com/assets/img/fb-text.png
IP
172.67.157.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gnerte.djcle.com/confirm.php
Certificate
IssuerGoogle Trust Services LLC
Subjectdjcle.com
Fingerprint59:28:DB:6C:FE:72:BA:83:2A:A0:61:CA:0A:14:5B:78:1A:67:D9:C4
ValidityFri, 01 Mar 2024 22:32:21 GMT - Thu, 30 May 2024 22:32:20 GMT

File type
PNG image data, 1280 x 294, 8-bit/color RGBA, non-interlaced
Size
32 kB (31565 bytes)
Hash
109104f3f959846063d6005d0d7e81ab
5c64bff53ad622699d85d468ea6398df9e594212
c7a915947c61415bbf5561f727499dd1c01ce68808e24c9c99be7feaee63445d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /assets/img/fb-text.png HTTP/1.1
Host: gnerte.djcle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnerte.djcle.com/confirm.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 00:03:30 GMT
content-type: image/png
content-length: 31565
last-modified: Wed, 27 Dec 2023 05:25:52 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnRRCqZI5HwLu1%2FUql7lGUa9XhT7pAec7bqO8yAIFjss22XUf%2BupQeDNJKi30fxxmFR1S3Z0ZM16I4S05abFMfmAxRxIFgmP%2Bmm56uZlBuEJeYicxkCsOc%2FYp%2BpOGpt731HH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876064622c9db50b-OSL
alt-svc: h3=":443"; ma=86400

gnerte.djcle.com/assets/img/meta.png

172.67.157.236

200 OK

59 kB

URL GET HTTP/3
gnerte.djcle.com/assets/img/meta.png
IP
172.67.157.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gnerte.djcle.com/confirm.php
Certificate
IssuerGoogle Trust Services LLC
Subjectdjcle.com
Fingerprint59:28:DB:6C:FE:72:BA:83:2A:A0:61:CA:0A:14:5B:78:1A:67:D9:C4
ValidityFri, 01 Mar 2024 22:32:21 GMT - Thu, 30 May 2024 22:32:20 GMT

File type
PNG image data, 1280 x 640, 8-bit/color RGBA, non-interlaced
Size
59 kB (59256 bytes)
Hash
91e365e2ff8bb6499eaae69fb958bba5
f29c382facd2bccd0a0a47f5f0fb49a97df47d63
e30aec61e5fc0fe900350c69e036584241666eccd240f04fbbb4584cddee788a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /assets/img/meta.png HTTP/1.1
Host: gnerte.djcle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnerte.djcle.com/confirm.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 00:03:30 GMT
content-type: image/png
content-length: 59256
last-modified: Wed, 27 Dec 2023 05:17:24 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3dx3hJphBgeUJyy2jXvyxUpntKeSSNZaQG0bCbqCml3%2BMuSa3F0JqlmIkvi4Yev1cuF%2F4NUH%2Fw9AbmfyEHAC3vDy2NfVbaW4wDsuzFRl7F%2FgHearZmr3XriX3WmXuIUO%2Fc8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876064622c9fb50b-OSL
alt-svc: h3=":443"; ma=86400

gnerte.djcle.com/img/Facebook_Logo_.png

172.67.157.236

404 Not Found

315 B

URL GET HTTP/3
gnerte.djcle.com/img/Facebook_Logo_.png
IP
172.67.157.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gnerte.djcle.com/confirm.php
Certificate
IssuerGoogle Trust Services LLC
Subjectdjcle.com
Fingerprint59:28:DB:6C:FE:72:BA:83:2A:A0:61:CA:0A:14:5B:78:1A:67:D9:C4
ValidityFri, 01 Mar 2024 22:32:21 GMT - Thu, 30 May 2024 22:32:20 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /img/Facebook_Logo_.png HTTP/1.1
Host: gnerte.djcle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnerte.djcle.com/confirm.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 00:03:30 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhKGpX96yVVgZxY%2Be3IhutXtA6%2F3HVAEMFv2L5IFwkoBZVzg5rU%2FqAIENat2gkc%2FcB0sNiMGL%2FxvoKBP35M2BKCnMB0O304GZtQQQ9zMHKhp6k%2FcjxQHLtqIYJQUdIEcCjWF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876064630cd7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gnerte.djcle.com/confirm.php

172.67.157.236

200 OK

26 kB

URL User Request GET HTTP/2
gnerte.djcle.com/confirm.php
IP
172.67.157.236:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdjcle.com
Fingerprint59:28:DB:6C:FE:72:BA:83:2A:A0:61:CA:0A:14:5B:78:1A:67:D9:C4
ValidityFri, 01 Mar 2024 22:32:21 GMT - Thu, 30 May 2024 22:32:20 GMT

File type
HTML document, ASCII text, with very long lines (851)
Size
26 kB (26506 bytes)
Hash
e941ce3e3ec5b345d2906f2c5e04592d
7f66f56995a298622e2015f718582c350e52d016
3ff0c36c73add66016a136b5cc714b791a6d8cc120dc1d2d22b27f5f0f81af1c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /confirm.php HTTP/1.1
Host: gnerte.djcle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 00:03:30 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wrPIGwc4JgdYpYtVjpaiRruYYpv%2B7Z9JntlW8ZVNPOFiyOS1sFIV%2FZ4MXk3eHbRAhYMeyU4Sa2JNY1TCFgVKuFhOiS3u13zGp%2Bxc1k6mw39k8eCHEwwA5tKBOKs4CqXhw%2BPV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876064603c9c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

gnerte.djcle.com/css/main_style.css?226001435

172.67.157.236

404 Not Found

315 B

URL GET HTTP/3
gnerte.djcle.com/css/main_style.css?226001435
IP
172.67.157.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gnerte.djcle.com/confirm.php
Certificate
IssuerGoogle Trust Services LLC
Subjectdjcle.com
Fingerprint59:28:DB:6C:FE:72:BA:83:2A:A0:61:CA:0A:14:5B:78:1A:67:D9:C4
ValidityFri, 01 Mar 2024 22:32:21 GMT - Thu, 30 May 2024 22:32:20 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

HTTP Headers

GET /css/main_style.css?226001435 HTTP/1.1
Host: gnerte.djcle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnerte.djcle.com/confirm.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 00:03:30 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWtbIpHlmj36%2Bq9GW%2BRd3mbLwBb26OPqyFAMP6gmsFhkEYzQOAdRZyFHc%2FvIqh4W48KkVgZctl6EGEfG%2BFQzFaC7HE0EYOhWd%2F4fEy0mUDDy11RCXXls7GRzXuv5y41xuCc8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876064622c9cb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN